Strix
26.1K

CVE-2008-4795

UnknownEPSS 4.34%

Last modified

CVE-2008-4795 is a vulnerability of currently unknown severity. The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks.. EPSS estimates a 4.34% chance of exploitation in the next 30 days.

Description

The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks.

Metrics

EPSS Probability
4.34%

90.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
OperaOpera<= 9.61—
OperaOpera5..10—
OperaOpera5.0—
OperaOpera5.1—
OperaOpera5.2—
OperaOpera5.3—
OperaOpera5.4—
OperaOpera5.5—
OperaOpera5.6—
OperaOpera5.7—
OperaOpera5.8—
OperaOpera5.9—
OperaOpera5.11—
OperaOpera5.12—
OperaOpera6Beta 1
OperaOpera6.0—
OperaOpera6.01—
OperaOpera6.02—
OperaOpera6.03—
OperaOpera6.04—
OperaOpera6.05—
OperaOpera6.06—
OperaOpera7Beta 1
OperaOpera7.0—
OperaOpera7.01—
OperaOpera7.02—
OperaOpera7.03—
OperaOpera7.10—
OperaOpera7.11—
OperaOpera7.20—
OperaOpera7.21—
OperaOpera7.22—
OperaOpera7.23—
OperaOpera7.50—
OperaOpera7.51—
OperaOpera7.52—
OperaOpera7.53—
OperaOpera7.54—
OperaOpera8.0—
OperaOpera8.01—
OperaOpera8.02—
OperaOpera8.50—
OperaOpera8.51—
OperaOpera8.52—
OperaOpera8.53—
OperaOpera8.54—
OperaOpera9.0—
OperaOpera9.01—
OperaOpera9.02—
OperaOpera9.10—

Showing 50 of 60 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-4795?
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks.
How severe is CVE-2008-4795?
Severity scoring for CVE-2008-4795 is pending analysis. The EPSS model estimates a 4.34% probability of exploitation in the next 30 days.
How do I fix CVE-2008-4795?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-4795?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST