CVE-2018-14041

Description

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

Base Score

6.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

7.723

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3	Windows
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in WebJars - bootstrap 4.1.2	Windows
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Ruby-bootstrap 4.1.2	Windows
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Nuget - bootstrap 4.1.2	Windows
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Nuget - bootstrap.sass 4.1.2	Windows
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in WebJars - bootstrap for Linux 4.1.2	Linux
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Ruby-bootstrap for Linux 4.1.2	Linux
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Nuget - bootstrap for Linux 4.1.2	Linux
Vulnerabilities CVE-2018-14040,CVE-2018-14042,CVE-2018-14041 are fixed in Nuget - bootstrap.sass for Linux 4.1.2	Linux
Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2018-14041)	NCM

No records found