CVE-2015-9247 An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body elemen...
MediumCVSS 5.4
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skyboxsecurity skybox platform | < 7.5.401 | 7.5.401 |
References
- www.sec-consult.com exploit third-party-advisory