Unscored severity · published Sep 23, 2006
CVE-2006-4958
Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
Secure Global Desktop · Sun
3.42; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4958
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4958
secunia.com
http://secunia.com/advisories/22037
securityreason.com
http://securityreason.com/securityalert/1623
securitytracker.com
http://securitytracker.com/id?1016900
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm
www.scip.ch
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555
More from Secure Global Desktop
–
CVE-2006-5201
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3)…
–
CVE-2006-4959
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via…