Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-mbq1-b3dr-1uc4
Vulnerability ID VCID-mbq1-b3dr-1uc4
Aliases CVE-2017-15092
Summary A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 3e-05 https://api.first.org/data/v1/epss?cve=CVE-2017-15092
epss 3e-05 https://api.first.org/data/v1/epss?cve=CVE-2017-15092
epss 3e-05 https://api.first.org/data/v1/epss?cve=CVE-2017-15092
epss 3e-05 https://api.first.org/data/v1/epss?cve=CVE-2017-15092
archlinux Medium https://security.archlinux.org/AVG-520
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2017-15092
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15092
ASA-201711-31 https://security.archlinux.org/ASA-201711-31
AVG-520 https://security.archlinux.org/AVG-520
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.00062
EPSS Score 3e-05
Published At April 18, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:32:31.264509+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0