| ID |
CVE-2004-0534
|
| Summary |
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:businessobjects:infoview:5.1.4:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:infoview:5.1.4:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:infoview:5.1.5:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:infoview:5.1.5:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:infoview:5.1.6:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:infoview:5.1.6:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:infoview:5.1.7:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:infoview:5.1.7:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:infoview:5.1.8:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:infoview:5.1.8:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:webintelligence:2.7:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:webintelligence:2.7:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:webintelligence:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:webintelligence:2.7.1:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:webintelligence:2.7.2:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:webintelligence:2.7.2:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*
-
cpe:2.3:a:businessobjects:webintelligence:2.7.4:*:*:*:*:*:*:*
cpe:2.3:a:businessobjects:webintelligence:2.7.4:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 4.3 (as of 11-07-2017 - 01:30) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
| refmap
via4
|
| bid | 11209 | | fulldisc | 20040907 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue | | secunia | 12587 | | vulnwatch | 20040917 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue | | xf | webintelligence-input-document-xss(17419) |
|
| Last major update |
11-07-2017 - 01:30 |
| Published |
17-09-2004 - 04:00 |
| Last modified |
11-07-2017 - 01:30 |
