Vulnerability Details CVE-2016-6913
Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.8%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2016-6913
-
cpe:2.3:a:alienvault:open_source_security_information_and_event_management:5.2
-
cpe:2.3:a:alienvault:unified_security_management:4.14
-
cpe:2.3:a:alienvault:unified_security_management:5.2