NVD

Id
85858  
Name
CVE-2017-2528  
Description
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the WebKit component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-05-22  
Modified Date
2017-07-07  
Seq
2017-2528  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
418947 85858 CVE-2017-6130 https://support.f5.com/csp/article/K23001529  View
421487 85858 CVE-2017-2128 JVN#11448789  View
421488 85858 CVE-2017-2128 96923  View
421489 85858 CVE-2017-2128 JVN#11448789  View
421490 85858 CVE-2017-2128 96923  View
422372 85858 CVE-2017-0224 98214  View
422373 85858 CVE-2017-0224 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0224  View
422374 85858 CVE-2017-0224 98214  View
422375 85858 CVE-2017-0224 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0224  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67560 JVNDB-2017-003857 Apple iOS および Safari などで使用される WebKit におけるユニバーサルクロスサイトスクリプティングの脆弱性 Apple iOS および Safari などで使用される WebKit には、ユニバーサルクロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-2528 0 CVE-2017-2528 85858 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003857.html 2017-05-15 2017-06-08 View