Home > Vulnerability Database > CVE-2017-7038

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2017-7038

Date: July 20, 2017

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

Severity Score

6.1

Related Resources (9)

Url: http://www.securityfocus.com/bid/99888

Url: http://www.securitytracker.com/id/1038950

Url: https://security.gentoo.org/glsa/201710-14

Url: https://support.apple.com/HT207921

Url: https://nvd.nist.gov/vuln/detail/CVE-2017-7038

Url: https://security-tracker.debian.org/tracker/CVE-2017-7038

Url: https://support.apple.com/HT207924

Url: https://support.apple.com/HT207923

Url: https://www.mend.io/vulnerability-database/CVE-2017-7038

Severity Score

6.1

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us