medium5.4

CVE-2015-9248

An issue was discovered in Skybox Platform before 7.5.201.

Impact

An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager.

Affected products

Vendor	Product	Affected versions
Skyboxsecurity	Skybox Platform	before 7.5.201

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt