CVE-2018-7997
UnknownEPSS 0.62%
Last modified
CVE-2018-7997 is a vulnerability of currently unknown severity. Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Eramba | Eramba | e1.0.6.033 |
References
- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069Exploit, Third Party Advisory
- https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7997?
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript.
How severe is CVE-2018-7997?
Severity scoring for CVE-2018-7997 is pending analysis. The EPSS model estimates a 0.62% probability of exploitation in the next 30 days.
How do I fix CVE-2018-7997?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-A…
- CVE-2018-7992Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D0…
- CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
- CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…
- CVE-2018-7995Race condition in the store_int_with_restart() function in a…
- CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
- CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference…
- CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer derefere…
- CVE-2018-8000In PoDoFo 0.9.5, there exists a heap-based buffer overflow v…
- CVE-2018-8001In PoDoFo 0.9.5, there exists a heap-based buffer over-read …
- CVE-2018-8002In PoDoFo 0.9.5, there exists an infinite loop vulnerability…
- CVE-2018-8003Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a …
Are you affected by CVE-2018-7997?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST