CVE-2017-2528

{"id": "CVE-2017-2528", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2017-05-22T05:29:01.723", "references": [{"url": "http://www.securityfocus.com/bid/98474", "source": "product-security@apple.com"}, {"url": "http://www.securitytracker.com/id/1038487", "source": "product-security@apple.com"}, {"url": "https://security.gentoo.org/glsa/201706-15", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/HT207798", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/HT207804", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://www.exploit-db.com/exploits/42105/", "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/98474", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1038487", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.gentoo.org/glsa/201706-15", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/HT207798", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/HT207804", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/42105/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en ciertos productos de Apple. iOS anterior a versi\u00f3n 10.3.2 est\u00e1 afectado. Safari anterior a versi\u00f3n 10.1.1 est\u00e1 afectado. El problema involucra al componente \"WebKit\". Permite a los atacantes remotos conducir ataques de tipo XSS Universal (UXSS) por medio de un sitio web dise\u00f1ado que interact\u00faa inapropiadamente con las tramas almacenadas en cach\u00e9."}], "lastModified": "2025-04-20T01:37:25.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD72565-70D0-4922-83CB-BC3DEF5C9FA1", "versionEndIncluding": "10.1"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C1766D9-DF3D-4EDC-9DDB-7762815B85C6", "versionEndIncluding": "10.3.1"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}