Unscored CVE-2007-4900 EUVD-2007-4881GHSA-rqv5-c4p5-fmv6

Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web…

Published Sep 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field.

References

20070912 RSA EnVision Reflected XSS Hole mailing-list
25645 vdb-entry
26707 third-party-advisory
rsa-envision-username-xss(36575) vdb-entry
3137 third-party-advisory
37099 vdb-entry
ADV-2007-3198 vdb-entry