Cross-Site Scripting Vulnerability in ASSETBASE by Infor
CVE-2017-2134

6.1MEDIUM

Key Information:

Vendor

Uchida Yoko Co., Ltd.

Status
Assetbase
Vendor
CVE Published:
28 April 2017

What is CVE-2017-2134?

The vulnerability in ASSETBASE versions 8.0 and earlier allows attackers to exploit cross-site scripting by injecting arbitrary web scripts or HTML through unspecified vectors. This can lead to unauthorized actions within the context of the user's browser session, posing significant security risks to both users and the integrity of the web application.

Affected Version(s)

ASSETBASE Ver.8.0 and earlier

References

http://www.securityfocus.com/bid/97708
vdb-entryx_refsource_BID
http://jvn.jp/en/jp/JVN82019695/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.