CVE-2018-25063

Description

A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability.

CVSS Version 3.1

nvd

CVE ID: CVE-2018-25063
Base Score: 6.1
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Impact Score: 2.7
Exploitability Score: 2.8

vuldb

CVE ID: CVE-2018-25063
Base Score: 3.5
Base Severity: LOW
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Impact Score: 1.4
Exploitability Score: 2.1

CVSS Version 3.0

vuldb

CVE ID: CVE-2018-25063
Base Score: 3.5
Base Severity: LOW
Vector String:CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CVSS Version 2.0

vuldb

CVE ID: CVE-2018-25063
Base Score: 4.0
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:S/C:N/I:P/A:N

Refrence: NVDMITRE