PT-2002-1580 · Novell · Novell Web Search

Publicado 2002-06-11 · Atualizado 2008-09-10 · CVE-2002-0530

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell Web Search version 2.0.1

Description A cross-site scripting issue allows remote attackers to execute arbitrary script as other Web Search users via the search parameter in the API endpoint.

Recommendations For Novell Web Search version 2.0.1, avoid using the search parameter in the affected API endpoint until the issue is resolved.

Correção

Identificadores relacionados

CVE-2002-0530

Produtos afetados

Novell Web Search

Referências · 3

• http://seclists.org/bugtraq/2002/Apr/0126.html · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0530 · Nota de Segurança