NVD

Id
20613  
Name
CVE-2016-5305  
Description
Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-06-30  
Modified Date
2016-07-01  
Seq
2016-5305  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112842 20613 CVE-2016-5305 91448  View
112843 20613 CVE-2016-5305 https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2630 JVNDB-2016-003403 Symantec Endpoint Protection Manager の管理スクリプトにおけるクロスサイトスクリプティングの脆弱性 Symantec Endpoint Protection Manager (SEPM) の管理スクリプトには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-5305 91811 CVE-2016-5305 20613 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003403.html 2016-06-28 2016-07-05 View