VulnerabilityModified

CVE-2007-2580

Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.

LOW 1.9EPSS 0.74%

Does this matter?

Lower severity and a low EPSS score (0.74%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 1.9 LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
EPSS: 0.74% probability · 53th percentile
CISA KEV: Not listed
Affected: apple/safari
Source: cve@mitre.org

References

http://securityreason.com/securityalert/2685
http://www.osvdb.org/35569
http://www.securityfocus.com/archive/1/467676/100/0/threaded
http://www.securityfocus.com/archive/1/468544/100/0/threaded
http://www.securityfocus.com/archive/1/468585/100/0/threaded
http://www.securityfocus.com/archive/1/468639/100/0/threaded
http://www.securityfocus.com/archive/1/468650/100/0/threaded
http://www.securityfocus.com/archive/1/468719/100/0/threaded
http://www.securityfocus.com/archive/1/468727/100/0/threaded
http://www.securityfocus.com/archive/1/468737/100/0/threaded
http://www.securityfocus.com/archive/1/468869/100/0/threaded
http://www.securityfocus.com/bid/23825
http://securityreason.com/securityalert/2685
http://www.osvdb.org/35569
http://www.securityfocus.com/archive/1/467676/100/0/threaded
http://www.securityfocus.com/archive/1/468544/100/0/threaded
http://www.securityfocus.com/archive/1/468585/100/0/threaded
http://www.securityfocus.com/archive/1/468639/100/0/threaded
http://www.securityfocus.com/archive/1/468650/100/0/threaded
http://www.securityfocus.com/archive/1/468719/100/0/threaded
http://www.securityfocus.com/archive/1/468727/100/0/threaded
http://www.securityfocus.com/archive/1/468737/100/0/threaded
http://www.securityfocus.com/archive/1/468869/100/0/threaded
http://www.securityfocus.com/bid/23825

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.