CVE-2016-8751
CVE-2016-8751
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Jun 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.
Affected products
Apache Software Foundation · Apache RangerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →