Vulnerability Details CVE-2008-1463
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://imperva.com/go/secadv/20080318
- http://secunia.com/advisories/29439
- http://www.securityfocus.com/bid/28279
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41359
- http://imperva.com/go/secadv/20080318
- http://secunia.com/advisories/29439
- http://www.securityfocus.com/bid/28279
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41359
Products affected by CVE-2008-1463
-
cpe:2.3:a:imperva:securesphere:5.0
-
cpe:2.3:a:imperva:securesphere_mx_management_server:5
-
cpe:2.3:a:imperva:securesphere_mx_management_server:5.0