Skip to main content

Filr CVE-2015-5968

MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2016-03-18 security@opentext.com
6.1
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 18, 2016 - 10:59 cve.org
MEDIUM 6.1

DescriptionCVE.org

Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

AnalysisAI

Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Affected products include: Novell Filr.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

More in Filr

View all
CVE-2016-1610 HIGH POC
7.5 Aug 01

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 befo

CVE-2016-1608 HIGH POC
8.8 Aug 01

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated u

CVE-2023-5762 HIGH POC
8.8 Dec 04

The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows t

CVE-2022-1777 HIGH POC
8.8 Jun 13

The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to

CVE-2016-1611 HIGH POC
7.8 Aug 01

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

CVE-2019-3475 HIGH POC
7.8 Feb 20

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authen

CVE-2016-1607 HIGH POC
7.2 Aug 01

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Sec

CVE-2019-3474 MEDIUM POC
6.5 Feb 20

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authent

CVE-2026-3266 CRITICAL
9.8 Mar 03

Missing authorization in OpenText Filr allows auth bypass via XSRF tokens.

CVE-2016-1609 MEDIUM POC
5.4 Aug 01

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security

CVE-2023-32268 HIGH
7.2 Dec 06

Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentia

CVE-2020-25838 MEDIUM
6.5 Dec 11

Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Rated medium severity (CVSS

Share

CVE-2015-5968 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy