Files
vuln-nvd/data/2018/CVE-2018-5691.json

2 lines
3.4 KiB
JSON

{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:analyzer:*:*:*:*:*:*:*:*","matchCriteriaId":"7B3B63A0-27F2-48D2-B59D-529344EFDA22","versionEndIncluding":"7.2","versionStartIncluding":"7.0","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:analyzer:*:*:*:*:*:*:*:*","matchCriteriaId":"24DCFA6F-DA37-40D7-8F89-1196B8C100E0","versionEndIncluding":"8.4","versionStartIncluding":"8.1","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"77F25B0D-FBE2-41DC-8732-E54595E3741C","versionEndIncluding":"7.2","versionStartIncluding":"7.0","vulnerable":true},{"criteria":"cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"F92C62C3-DB42-4E9C-B8CF-F90E7557A4F7","versionEndIncluding":"8.4","versionStartIncluding":"8.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module."},{"lang":"es","value":"SonicWall Global Management System (GMS) 8.1 tiene XSS mediante los valores \"newName\" y \"Name\" del módulo \"/sgms/TreeControl\"."}],"id":"CVE-2018-5691","lastModified":"2026-06-17T02:00:36.293","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-01-14T04:29:00.287","references":[{"source":"cve@mitre.org","tags":["Broken Link"],"url":"http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867"},{"source":"cve@mitre.org","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003"},{"source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"],"url":"https://www.vulnerability-lab.com/get_content.php?id=1819"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"url":"http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.vulnerability-lab.com/get_content.php?id=1819"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}