CVE-2020-16275

{"id": "CVE-2020-16275", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2020-08-10T23:15:12.397", "references": [{"url": "https://download.saintcorporation.com/products/saint_advisory15.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://download.saintcorporation.com/products/saint_advisory15.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link."}, {"lang": "es", "value": "Una vulnerabilidad de tipo cross-site scripting (XSS) en el componente Credential Manager en SAINT Security Suite versiones 8.0 hasta 9.8.20, podr\u00eda permitir que se ejecuten script arbitrario en el contexto de un usuario que ha iniciado sesi\u00f3n cuando el usuario hace clic en un enlace especialmente dise\u00f1ado"}], "lastModified": "2024-11-21T05:07:04.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:carson-saint:saint_security_suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AF6201A-4BDB-47BD-990B-6F6FAA36D2D0", "versionEndIncluding": "9.8.20", "versionStartIncluding": "8.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}