VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
JVN#84396512     ( JVNDB-2009-000065 )
SugarCRM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN84396512/index.html

SugarCRM Inc. が提供する SugarCRM には、クロスサイトスクリプティングの脆弱性が存在します。




About This Analysis Information
Analysis Information Provider:
JPCERT/CC
First Published:
2009-10-02
Source Information Category:
Advisory, Alert
Last Updated:
2009-10-02




Affected Product Tags
lapt:/a:sugarcrm:sugar_community_editons     (Sugar Community Editions)
lapt:/a:sugarcrm:sugar_enterprise_editons     (Sugar Enterprise Editions)
lapt:/a:sugarcrm:sugar_professional_editons     (Sugar Professional Editions )
 


Vulnerability Analysis Results
[Information Source Reliability] [?]
Low [?]

Medium [?]
X High [?]

[Impact Level] [?]
Low [?]

Low-Medium [?]
X Medium-High [?]
High [?]

[Access Required] [?]
Physical [?]

Local [?]
Non-routed [?]
X Routed [?]

[Authentication] [?]
Privileged [?]

Standard [?]
Limited [?]
X None or Unnecessary [?]

[User Interaction Required] [?]
Complex [?]

X Simple [?]
None [?]

[Technical Difficulty] [?]
High [?]

X Medium-High [?]
Low-Medium [?]
Low [?]

[Availability of Remediation] [?]
X Official Patch [?]

Official Workaround [?]
Unofficial Patch [?]
None [?]

[Incident Activity] [?]
None [?]

Exploit or PoC [?]
Activity Observed [?]

Alternatives
JVN iPedia JVNDB-2009-000065 SugarCRM におけるクロスサイトスクリプティングの脆弱性
SugarCRM Inc. が提供する SugarCRM には、クロスサイトスクリプティングの脆弱性が存在します。








References

Copyright © 2009 JPCERT/CC All Rights Reserved.