CVE-2015-9248

An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-01-12

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Skybox Platform (Skyboxsecurity)

References

• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilit…