A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /licenses. The manipulation of the argument view with the input teste"><script>alert(%27c4ng4c3ir0%27)</script> leads to cross site scripting. The attack can be initiated remotely. VDB-224998 is the identifier assigned to this vulnerability. NOTE: Vendor did not respond if and how they may handle this issue.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.224998 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.224998 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?ctiid.224998 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.224998 | Permissions Required Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 07:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
| References | () https://vuldb.com/?ctiid.224998 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.224998 - Permissions Required, Third Party Advisory, VDB Entry |
29 Feb 2024, 01:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 09:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-1860
Mitre link : CVE-2023-1860
CVE.ORG link : CVE-2023-1860
JSON object : View
Products Affected
keysight
- hawkeye
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')