critical9.6
CVE-2018-18864
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
Impact
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Loadbalancer | Enterprise Va Max | before 8.3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/150135/Loadbalancer.org-Enterprise-VA-MAX-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2018/Nov/5
- http://packetstormsecurity.com/files/150135/Loadbalancer.org-Enterprise-VA-MAX-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2018/Nov/5