CVE-2018-17952

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
Micro FocusNetIQ eDirectory 9.1 SP2All versions prior to version 9.1 SP2

References

Timeline

Published
Dec 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-179538.1A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 cCVE-2018-179547.8An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud CVE-2018-179555.5In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink proCVE-2018-179567.8In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yCVE-2018-179577.8The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commaCVE-2018-179587.5Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.CVE-2018-17967.8IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-ForCVE-2018-179606.1CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.CVE-2018-179618.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTCVE-2018-179627.5Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.CVE-2018-179639.8qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service CVE-2018-179646.1Aryanic HighPortal 12.5 has XSS via an Add Tags action.
CVE-2018-17952: Medium severity, CVSS 6.1 | Vulnix