Unscored severity · published Feb 14, 2008
CVE-2008-0769
Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Livelink Ecm · Opentext
9.0; 9.1; 9.2; 9.3; 9.4; 9.5; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0769
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0769
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html
secunia.com
http://secunia.com/advisories/28723
withdk.com
http://withdk.com/archives/livelink-utf7-xss-advisory.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/27537
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/40123
More from Livelink Ecm
–
CVE-2010-5283
Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests…
–
CVE-2010-5282
Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1)…