CVE-2018-1000557: XSS

First published: Tue Jun 26 2018(Updated: )

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/weakness
• agent/author
• agent/last-modified-date
• agent/tags
• agent/description
• agent/first-publish-date
• agent/event
• vendor/ocsinventory-ng
• canonical/ocsinventory-ng ocsinventory ng
• version/ocsinventory-ng ocsinventory ng/2.4