CVE-2017-15194: XSS
Published Oct 10, 2017
·Updated
include/globalsession.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.
Affected Software
1 affected component
Cacti Cacti=1.1.25
Remediation
Patch Available
Event History
Oct 10, 2017
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15194?
CVE-2017-15194 has a medium severity level due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2017-15194?
To fix CVE-2017-15194, upgrade Cacti to version 1.1.26 or later where the vulnerability is addressed.
3
What type of attack does CVE-2017-15194 facilitate?
CVE-2017-15194 facilitates cross-site scripting (XSS) attacks through manipulated URIs and refresh page parameters.
4
Which versions of Cacti are affected by CVE-2017-15194?
CVE-2017-15194 specifically affects Cacti version 1.1.25.
5
Can CVE-2017-15194 impact data security?
Yes, CVE-2017-15194 can impact data security as it allows attackers to execute arbitrary scripts in the context of the user's session.