Vulnerability in Airmagnet Enterprise
CVE-2006-5741
Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon, when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.013 (70.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 70.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Airmagnet Enterprise — versions 7.5
References
- www.securityfocus.com/archive/1/449119/100/200/threaded (mailing-list)
- www.osvdb.org/29919 (vdb-entry)
- www.osvdb.org/29918 (vdb-entry)
- www.osvdb.org/29920 (vdb-entry)
- www.securityfocus.com/bid/20602 (vdb-entry)
- www.securityfocus.com/archive/1/449739/100/100/threaded (mailing-list)
- www.securityfocus.com/archive/1/451978/100/100/threaded (mailing-list)
- secunia.com/advisories/22475 (third-party-advisory)