CVE-2018-1000855: XSS
easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000855?
CVE-2018-1000855 is classified as a medium severity vulnerability due to its potential for reflected Cross Site Scripting attacks.
How do I fix CVE-2018-1000855?
To resolve CVE-2018-1000855, upgrade easymon to version 1.4.1 or later.
What is the vulnerability type of CVE-2018-1000855?
CVE-2018-1000855 is classified as a Cross Site Scripting (XSS) vulnerability.
Who is affected by CVE-2018-1000855?
CVE-2018-1000855 affects users of easymon version 1.4 and earlier.
What kind of attacks can CVE-2018-1000855 facilitate?
CVE-2018-1000855 can facilitate reflected XSS attacks that may allow an attacker to steal cookies.