{"affected":[{"affectedData":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"iOS 13.3.1 and iPadOS 13.3.1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"tvOS 13.3.1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"Safari 13.0.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iTunes for Windows","vendor":"Apple","versions":[{"lessThan":"iTunes for Windows 12.10.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iCloud for Windows","vendor":"Apple","versions":[{"lessThan":"iCloud for Windows 11.0","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iCloud for Windows (Legacy)","vendor":"Apple","versions":[{"lessThan":"iCloud for Windows 7.17","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*","matchCriteriaId":"65AF31B2-A5B2-4BF5-B534-B53BE79CDDA2","versionEndExcluding":"7.17","vulnerable":true},{"criteria":"cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*","matchCriteriaId":"F2F63E96-27FA-4637-8081-A9B76C7385F8","versionEndIncluding":"10.8","versionStartIncluding":"10.0","vulnerable":true},{"criteria":"cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*","matchCriteriaId":"15CC59BB-5F0C-4381-A7E7-EFFCC01CC308","versionEndExcluding":"12.10.4","vulnerable":true},{"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","matchCriteriaId":"BB81F563-28D4-425E-A81A-002557E23CF8","versionEndExcluding":"13.0.5","vulnerable":true},{"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","matchCriteriaId":"3DD89B34-EA75-4559-A112-13B489B2502A","versionEndExcluding":"13.3.1","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"B4BFEAAB-906E-4F49-A6DB-5717BADD8089","versionEndExcluding":"13.3.1","vulnerable":true},{"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","matchCriteriaId":"7C2B3AC9-FAFE-4819-9538-A072B446BE78","versionEndExcluding":"13.3.1","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*","matchCriteriaId":"7E0C2B1D-5610-4C43-93AE-D739560B73BB","versionEndExcluding":"2.26.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting."},{"lang":"es","value":"Se abordó un problema lógico con una administración de estado mejorada. Este problema es corregido en iOS versión 13.3.1 y iPadOS  versión 13.3.1, tvOS  versión 13.3.1, Safari  versión 13.0.5, iTunes para Windows versión 12.10.4, iCloud para Windows  versión 11.0, iCloud para Windows  versión 7.17. El procesamiento de contenido web diseñado maliciosamente puede conllevar a un ataque de tipo cross site scripting universal."}],"id":"CVE-2020-3867","lastModified":"2026-06-17T03:19:10.273","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-27T21:15:18.130","references":[{"source":"product-security@apple.com","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html"},{"source":"product-security@apple.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202003-22"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/HT210947"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/HT210948"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202003-22"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/HT210947"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/HT210948"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}