CNVD-2015-02286
Vulnerability from cnvd - Published: 2015-04-10
VLAI Severity ?
Title
Ericsson Drutt Mobile Service Delivery Platform存在多个跨站脚本漏洞
Description
Ericsson Drutt Mobile Service Delivery Platform是瑞典爱立信（Ericsson）公司的一套为现场和非门户业务的服务交付平台（SDP）提供支持的业务支持系统。
Ericsson Drutt Mobile Service Delivery Platform 4、5和6存在多个跨站脚本漏洞，允许远程攻击者利用漏洞在受影响用户的浏览器上下文中执行任意代码。
Severity
中
Formal description
目前没有详细的解决方案，请到厂商的主页下载： http://www.ericsson.com
Reference
http://packetstormsecurity.com/files/131232/Ericsson-Drutt-MSDP-Report-Viewer-Cross-Site-Scripting.html
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2165
Impacted products
| Name | ['Ericsson Drutt Mobile Service Delivery Platform 4', 'Ericsson Drutt Mobile Service Delivery Platform 5', 'Ericsson Drutt Mobile Service Delivery Platform 6'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2015-2165"
}
},
"description": "Ericsson Drutt Mobile Service Delivery Platform\u662f\u745e\u5178\u7231\u7acb\u4fe1\uff08Ericsson\uff09\u516c\u53f8\u7684\u4e00\u5957\u4e3a\u73b0\u573a\u548c\u975e\u95e8\u6237\u4e1a\u52a1\u7684\u670d\u52a1\u4ea4\u4ed8\u5e73\u53f0\uff08SDP\uff09\u63d0\u4f9b\u652f\u6301\u7684\u4e1a\u52a1\u652f\u6301\u7cfb\u7edf\u3002\r\n\r\nEricsson Drutt Mobile Service Delivery Platform 4\u30015\u548c6\u5b58\u5728\u591a\u4e2a\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7528\u6237\u7684\u6d4f\u89c8\u5668\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
"discovererName": "Anastasios Monachos (secuid0) - [anastasiosm (at) gmail (dot) com]",
"formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://www.ericsson.com",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2015-02286",
"openTime": "2015-04-10",
"products": {
"product": [
"Ericsson Drutt Mobile Service Delivery Platform 4",
"Ericsson Drutt Mobile Service Delivery Platform 5",
"Ericsson Drutt Mobile Service Delivery Platform 6"
]
},
"referenceLink": "http://packetstormsecurity.com/files/131232/Ericsson-Drutt-MSDP-Report-Viewer-Cross-Site-Scripting.html\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2165",
"serverity": "\u4e2d",
"submitTime": "2015-04-09",
"title": "Ericsson Drutt Mobile Service Delivery Platform\u5b58\u5728\u591a\u4e2a\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…