Test ID:	1.3.6.1.4.1.25623.1.0.106417
Category:	Web application abuses
Title:	Foreman 1.8.x < 1.12.2 XSS Vulnerability
Summary:	Foreman is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Foreman is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: Network interface identifiers stored for hosts may contain HTML or JavaScript that allows a stored XSS vulnerability when later viewing the host edit form. Affected Software/OS: Foreman versions 1.8.x through 1.12.1. Solution: Update to version 1.12.2 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6320 92431 http://www.securityfocus.com/bid/92431 RHBA-2016:1885 https://access.redhat.com/errata/RHBA-2016:1885 http://projects.theforeman.org/issues/16022 https://bugzilla.redhat.com/show_bug.cgi?id=1365785 https://github.com/theforeman/foreman/pull/3714/commits/850c38451c7bbde75521b796d16aca26e4d240a0 https://theforeman.org/security.html#2016-6320
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.