Search for vulnerabilities
Vulnerability details: VCID-zz7c-ev3w-aaag
Vulnerability ID VCID-zz7c-ev3w-aaag
Aliases CVE-2008-5022
Summary CVE-2008-5022 Mozilla nsXMLHttpRequest::NotifyEventListeners() same-origin violation
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-287 Improper Authentication
System Score Found at
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0976
rhas Critical https://access.redhat.com/errata/RHSA-2008:0977
rhas Critical https://access.redhat.com/errata/RHSA-2008:0978
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.00660 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.02647 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.02647 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.02647 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.02647 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.10459 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
epss 0.16161 https://api.first.org/data/v1/epss?cve=CVE-2008-5022
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=470895
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2008-5022
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2008-56
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00004.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5022.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5022
https://bugzilla.mozilla.org/show_bug.cgi?id=460002
http://secunia.com/advisories/32684
http://secunia.com/advisories/32693
http://secunia.com/advisories/32694
http://secunia.com/advisories/32695
http://secunia.com/advisories/32713
http://secunia.com/advisories/32714
http://secunia.com/advisories/32715
http://secunia.com/advisories/32721
http://secunia.com/advisories/32778
http://secunia.com/advisories/32798
http://secunia.com/advisories/32845
http://secunia.com/advisories/32853
http://secunia.com/advisories/33433
http://secunia.com/advisories/33434
http://secunia.com/advisories/34501
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11186
http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00366.html
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00385.html
http://ubuntu.com/usn/usn-667-1
http://www.debian.org/security/2008/dsa-1669
http://www.debian.org/security/2008/dsa-1671
http://www.debian.org/security/2009/dsa-1696
http://www.debian.org/security/2009/dsa-1697
http://www.mandriva.com/security/advisories?name=MDVSA-2008:228
http://www.mandriva.com/security/advisories?name=MDVSA-2008:230
http://www.mandriva.com/security/advisories?name=MDVSA-2008:235
http://www.mozilla.org/security/announce/2008/mfsa2008-56.html
http://www.redhat.com/support/errata/RHSA-2008-0976.html
http://www.redhat.com/support/errata/RHSA-2008-0977.html
http://www.redhat.com/support/errata/RHSA-2008-0978.html
http://www.securityfocus.com/bid/32281
http://www.securitytracker.com/id?1021188
http://www.us-cert.gov/cas/techalerts/TA08-319A.html
http://www.vupen.com/english/advisories/2008/3146
http://www.vupen.com/english/advisories/2009/0977
470895 https://bugzilla.redhat.com/show_bug.cgi?id=470895
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
CVE-2008-5022 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5022
CVE-2008-5022 https://nvd.nist.gov/vuln/detail/CVE-2008-5022
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2008-56 https://www.mozilla.org/en-US/security/advisories/mfsa2008-56
RHSA-2008:0976 https://access.redhat.com/errata/RHSA-2008:0976
RHSA-2008:0977 https://access.redhat.com/errata/RHSA-2008:0977
RHSA-2008:0978 https://access.redhat.com/errata/RHSA-2008:0978
USN-667-1 https://usn.ubuntu.com/667-1/
USN-668-1 https://usn.ubuntu.com/668-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5022
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.80042
EPSS Score 0.00660
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.