NVD

Id
4830  
Name
CVE-2008-5043  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-11-12  
Modified Date
2012-10-30  
Seq
2008-5043  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30432 4830 CVE-2008-5043 20081108 Metrica Service Assurance Multiple Cross Site Scripting  View
30433 4830 CVE-2008-5043 4578  View
30434 4830 CVE-2008-5043 20081108 Metrica Service Assurance Multiple Cross Site Scripting  View
30435 4830 CVE-2008-5043 32233  View
30436 4830 CVE-2008-5043 ADV-2008-3145  View
30437 4830 CVE-2008-5043 metricaservice-reporttree-launch-xss(46495)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49736 JVNDB-2008-005046 IBM Metrica Service Assurance Framework におけるクロスサイトスクリプティングの脆弱性 IBM Metrica Service Assurance Framework の Web ベースのインターフェースには、レポート名関連の処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-5043 35156 CVE-2008-5043 4830 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005046.html 2008-11-12 2012-09-25 View