CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Description
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-209 · CAPEC-588 · CAPEC-591 · CAPEC-592 · CAPEC-63 · CAPEC-85
CVEs mapped to this weakness (48,563)
page 978 of 2,429| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-4406 | Med | 0.40 | 6.1 | 0.03 | Aug 6, 2018 | A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. | ||
| CVE-2018-14977 | Med | 0.40 | 6.1 | 0.01 | Aug 6, 2018 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070. | ||
| CVE-2018-14955 | Med | 0.40 | 6.1 | 0.01 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute). | ||
| CVE-2018-14954 | Med | 0.40 | 6.1 | 0.02 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute. | ||
| CVE-2018-14953 | Med | 0.40 | 6.1 | 0.01 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack. | ||
| CVE-2018-14952 | Med | 0.40 | 6.1 | 0.01 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<maction xlink:href=" attack. | ||
| CVE-2018-14951 | Med | 0.40 | 6.1 | 0.01 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack. | ||
| CVE-2018-14950 | Med | 0.40 | 6.1 | 0.01 | Aug 5, 2018 | The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<a xlink:href=" attack. | ||
| CVE-2018-14929 | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home page) url parameter. | ||
| CVE-2018-14924 | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field. | ||
| CVE-2018-14906 | — | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters. | |
| CVE-2018-14905 | — | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter. | |
| CVE-2018-14904 | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid. | ||
| CVE-2018-6590 | Med | 0.40 | 6.1 | 0.01 | Aug 3, 2018 | CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability. | ||
| CVE-2018-7649 | Med | 0.40 | 6.1 | 0.01 | Aug 2, 2018 | Monitorix before 3.10.1 allows XSS via CGI variables. | ||
| CVE-2018-8032 | Med | 0.40 | 6.1 | 0.11 | Aug 2, 2018 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. | ||
| CVE-2018-14838 | Med | 0.40 | 6.1 | 0.01 | Aug 2, 2018 | rejucms 2.1 has stored XSS via the admin/book.php content parameter. | ||
| CVE-2018-0411 | Med | 0.40 | 6.1 | 0.02 | Aug 1, 2018 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The… | ||
| CVE-2018-0406 | Med | 0.40 | 6.1 | 0.02 | Aug 1, 2018 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a user of the web-based… | ||
| CVE-2016-8634 | Med | 0.40 | 6.1 | 0.01 | Aug 1, 2018 | A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS… |
- risk 0.40cvss 6.1epss 0.03
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070.
- risk 0.40cvss 6.1epss 0.01
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
- risk 0.40cvss 6.1epss 0.02
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
- risk 0.40cvss 6.1epss 0.01
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
- risk 0.40cvss 6.1epss 0.01
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<maction xlink:href=" attack.
- risk 0.40cvss 6.1epss 0.01
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.
- risk 0.40cvss 6.1epss 0.01
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<a xlink:href=" attack.
- risk 0.40cvss 6.1epss 0.01
Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home page) url parameter.
- risk 0.40cvss 6.1epss 0.01
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field.
- risk 0.40cvss 6.1epss 0.01
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.
- risk 0.40cvss 6.1epss 0.01
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.
- risk 0.40cvss 6.1epss 0.01
Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid.
- risk 0.40cvss 6.1epss 0.01
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.
- risk 0.40cvss 6.1epss 0.01
Monitorix before 3.10.1 allows XSS via CGI variables.
- risk 0.40cvss 6.1epss 0.11
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
- risk 0.40cvss 6.1epss 0.01
rejucms 2.1 has stored XSS via the admin/book.php content parameter.
- risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
- risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a user of the web-based…
- risk 0.40cvss 6.1epss 0.01
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS…