CVE-2016-6913

Description

Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.

References

https://www.alienvault.com/forums/discussion/7558/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-7798

http://www.securityfocus.com/bid/92632

http://seclists.org/fulldisclosure/2016/Aug/122

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS