PT-2020-7468 · Opsview+1 · Opsview+1

Published 2020-01-02 · Updated 2020-01-08 · CVE-2013-3936

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Opsview versions prior to 4.4.1 Opsview Core versions prior to 20130522

Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple cross-site scripting (XSS) vulnerabilities. This enables attackers to execute malicious scripts on the victim's browser, potentially leading to unauthorized actions or data theft.

Recommendations: For Opsview versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. For Opsview Core versions prior to 20130522, update to version 20130522 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-3936

Affected Products

Opsview

Opsview Core

References · 5

• http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-3936 · Security Note
• http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822 · Vendor Advisory
• https://t.me/cibsecurity/8945 · Telegram Post
• https://t.me/cibsecurity/9038 · Telegram Post