VulnerabilityModified

CVE-2017-9313

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to…

MEDIUM 6.1EPSS 1.39%

Does this matter?

Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.0: 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 1.39% probability · 72th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-79
Affected: webmin/webmin
Source: cve@mitre.org

EPSS trend

EPSS 1.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://seclists.org/bugtraq/2017/Jul/3Exploit, Third Party Advisory
http://www.securityfocus.com/bid/99373Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038814Third Party Advisory, VDB Entry
http://www.webmin.com/changes.htmlRelease Notes, Vendor Advisory
https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1abPatch, Third Party Advisory
https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1bPatch, Third Party Advisory
http://seclists.org/bugtraq/2017/Jul/3Exploit, Third Party Advisory
http://www.securityfocus.com/bid/99373Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038814Third Party Advisory, VDB Entry
http://www.webmin.com/changes.htmlRelease Notes, Vendor Advisory
https://github.com/webmin/webmin/commit/a330e913ee099cb9c586ce1b9267647fc566c1abPatch, Third Party Advisory
https://github.com/webmin/webmin/commit/c2d4a90639afb2403979aa91ba75cb332ae16d1bPatch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.