Vulnerability Details : CVE-2006-3522
Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2006-3522
- cpe:2.3:a:clearswift:mimesweeper_for_web:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-3522
0.81%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 72 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-3522
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
References for CVE-2006-3522
-
http://securitytracker.com/id?1016454
-
http://www.securityfocus.com/archive/1/439641/100/0/threaded
-
http://www.vupen.com/english/advisories/2006/2731
-
http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/27642
-
http://www.securityfocus.com/bid/18916
-
http://marc.info/?l=full-disclosure&m=115249298204354&w=2
-
http://www.securityfocus.com/archive/1/440140/100/0/threaded
-
http://marc.info/?l=full-disclosure&m=115253320721404&w=2
-
http://marc.info/?l=full-disclosure&m=115253898206225&w=2
-
http://secunia.com/advisories/20998
Patch;Vendor Advisory
Jump to