CVE-2015-9248 An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Man...
MediumCVSS 5.4
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skyboxsecurity skybox platform | < 7.5.201 | 7.5.201 |
References
- www.sec-consult.com exploit third-party-advisory