VulnerabilityModified
CVE-2007-5472
Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display…
MEDIUM 4.3EPSS 2.40%
Does this matter?
Lower severity and a low EPSS score (2.40%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.40% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- broadcom/host-based intrusion prevention system
- Source
- cve@mitre.org
References
- http://osvdb.org/37998
- http://secunia.com/advisories/27301Patch, Vendor Advisory
- http://securitytracker.com/id?1018839
- http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.aspPatch
- http://www.securityfocus.com/archive/1/482536/100/0/threaded
- http://www.securityfocus.com/bid/26134
- http://www.vupen.com/english/advisories/2007/3547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37285
- http://osvdb.org/37998
- http://secunia.com/advisories/27301Patch, Vendor Advisory
- http://securitytracker.com/id?1018839
- http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.aspPatch
- http://www.securityfocus.com/archive/1/482536/100/0/threaded
- http://www.securityfocus.com/bid/26134
- http://www.vupen.com/english/advisories/2007/3547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37285
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.