CVE-2017-15885

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214.

• CWE-79

• https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/Exploit, Issue Tracking, Third Party Advisory
• https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/Exploit, Issue Tracking, Third Party Advisory

Published

Oct 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15879CSV Injection (aka Excel Macro Injection or Formula Injectio…
• CVE-2017-15880SQL injection vulnerability vulnerability in the EyesOfNetwo…
• CVE-2017-15881Cross-Site Scripting vulnerability in KeystoneJS before 4.0.…4.8
• CVE-2017-15882The London Trust Media Private Internet Access (PIA) applica…
• CVE-2017-15883Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x …
• CVE-2017-15884In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmwar…
• CVE-2017-15886Server-side request forgery (SSRF) vulnerability in Link Pre…
• CVE-2017-15887An improper restriction of excessive authentication attempts…
• CVE-2017-15888Cross-site scripting (XSS) vulnerability in Custom Internet …
• CVE-2017-15889Command injection vulnerability in smart.cgi in Synology Dis…
• CVE-2017-15890Cross-site scripting (XSS) vulnerability in Disclaimer in Sy…
• CVE-2017-15891Improper access control vulnerability in SYNO.Cal.EventBase …