CVE-2017-5998

MEDIUM

Intersect Alliance Snare Epilog - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the str_log_name parameter in a "Web Admin Portal > Log Configuration > Add" action.

References (1)

[Exploit, Technical Description, Third Party Advisory] http://arthrocyber.com/research

Scores

CVSS v3 5.4

EPSS 0.0015

EPSS Percentile 35.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (2)

intersect_alliance/snare_epilog

n/a/n/a

Timeline

Published Feb 17, 2017

Tracked Since Feb 18, 2026