CVE-2016-6913 Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.ph...
MediumCVSS 5.4
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault open source security information and event management | <= 5.2 | No fix listed |
| alienvault unified security management | <= 5.2 | No fix listed |
References
- 20160824 [RCESEC-2016-005][CVE-2016-6913] AlienVault USM/OSSIM 5.2 conf/reload.php "back" DOM-based Cross-Site Scripting exploit mailing-list third-party-advisory
- 92632 vdb-entry
- www.alienvault.com vendor-advisory