CVE-2015-20130mediumobserved exploitationCWE-79

CVE-2015-20130: medium-severity vulnerability in Netsweeper

Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php

Published

Follow this CVE+ Monitor Netsweeper

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

55Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 5.1epss 0.3%
from disclosure to weapon
Published on NVDOct 30
VulnCheckOct 30
Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the log request parameter, which is reflected into the HTML response without output encoding. Attackers can craft a malicious URL and induce a user to request it, resulting in arbitrary JavaScript execution within the victim's browser session against the Netsweeper web administration interface. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
Netsweeper · Netsweeper
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.