PT-2015-7290 · Opentext · Opentext Secure Mft

Alexander Stra�Heim + 1 · Publicado 2015-08-20 · Atualizado 2018-10-09 · CVE-2015-6530

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenText Secure MFT versions 2013 before 2013 R3 P6 OpenText Secure MFT versions 2014 before 2014 R2 P2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to the "userdashboard.jsp" endpoint.

Recommendations For OpenText Secure MFT versions 2013 before 2013 R3 P6, update to version 2013 R3 P6 or later. For OpenText Secure MFT versions 2014 before 2014 R2 P2, update to version 2014 R2 P2 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-6530

Produtos afetados

Opentext Secure Mft

Referências · 4

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-041.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/133247/OpenText-Secure-MFT-2014-R2-SP4-Cross-Site-Scripting.html · Exploit
• http://securityfocus.com/archive/1/536260/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6530 · Nota de Segurança