CVE-2017-18228: XSS
Published Mar 12, 2018
·Updated
Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request.
Affected Software
1 affected component
BMC Remedy Action Request System<=9.1
Event History
Mar 12, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18228?
CVE-2017-18228 is a vulnerability in Remedy Mid Tier in BMC Remedy AR System 9.1 that allows cross-site scripting (XSS) attacks.
2
How does CVE-2017-18228 impact the BMC Remedy AR System 9.1?
CVE-2017-18228 allows attackers to perform XSS attacks by exploiting the ATTKey parameter in an arsys/servlet/AttachServlet request.
3
What is the severity of CVE-2017-18228?
The severity of CVE-2017-18228 is medium, with a CVSS score of 5.4.
4
How can I fix CVE-2017-18228 vulnerability in BMC Remedy AR System 9.1?
To fix CVE-2017-18228, it is recommended to apply the latest security patches and updates provided by BMC to the Remedy Mid Tier in BMC Remedy AR System 9.1.
5
Where can I find more information about CVE-2017-18228?
You can find more information about CVE-2017-18228 at the following link: [BMC Communities Thread](https://communities.bmc.com/thread/164169).