medium5.4
CVE-2016-6913
Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via t…
Impact
Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alienvault | Open Source Security Information And Event Management | through 5.2 |
| Alienvault | Unified Security Management | through 5.2 |