Unscored severity · published Aug 20, 2015
CVE-2015-6530
Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to userdashboard.jsp.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Secure Mft 2013 · Opentext
through r3 · source: NVD
SM
Secure Mft 2014 · Opentext
through r2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6530
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6530
Exploit
http://packetstormsecurity.com/files/133247/OpenText-Secure-MFT-2014-R2-SP4-Cross-Site-Scripting.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/536260/100/0/threaded
Exploit
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-041.txt