Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters."

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise
    (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before
    1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via
    unspecified vectors related to "insufficient quoting of parameters." (CVE-2008-2025)

Insufficient quoting of parameters allowed attackers to conduct cross site scripting (XSS) attacks (CVE-2008-2025).

ID	Name	Product	Family	Type	Severity
432301	SCA: security update for struts:struts (GHSA-wcgx-2hvx-5cwr)	Tenable Cloud Security	SCA Checks	Local	medium
432301	SCA: security update for struts:struts (GHSA-wcgx-2hvx-5cwr)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
40314	openSUSE Security Update : struts (struts-371)	Nessus	SuSE Local Security Checks	Local	medium
40139	openSUSE Security Update : struts (struts-371)	Nessus	SuSE Local Security Checks	Local	medium
36049	openSUSE 10 Security Update : struts (struts-5872)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-2025

medium

Tenable Plugins

medium

medium

medium

medium

medium