First published: Mon Sep 28 2009(Updated: )
Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
AlienVault OSSIM | <=2.1 | |
AlienVault OSSIM | =1.0.4 | |
AlienVault OSSIM | =1.0.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.