PT-2018-4568 · Bmc · Bmc Remedy Action Request System

Publicado 2018-03-24 · Atualizado 2018-04-18 · CVE-2015-9257

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BMC Remedy Action Request (AR) System version 9.0 before 9.0.00 Service Pack 2 hot fix 1

Description The issue is related to a persistent XSS.

Recommendations For versions prior to 9.0.00 Service Pack 2 hot fix 1, update to at least 9.0.00 Service Pack 2 hot fix 1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-9257

Produtos afetados

Bmc Remedy Action Request System

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-9257 · Nota de Segurança
• https://docs.bmc.com/docs/display/public/ars9000/Cross+site+scripting+%28XSS%29+in+Remedy+9.0%2C+9.0+Service+Pack+1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9257 · Nota