VULNERABILITY INTELLIGENCE

CVE-2018-1000998

CVSS score6.1 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2019-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references