CVE-2017-8892

MEDIUM

OpenText Tempo Box 10.0.3 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name of an uploaded image.

References (1)

Scores

CVSS v3 6.1
EPSS 0.0020
EPSS Percentile 41.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (2)
opentext/tempo_box
n/a/n/a
Published May 10, 2017
Tracked Since Feb 18, 2026