Home > Vulnerability Database > CVE-2017-7059

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2017-7059

Date: July 20, 2017

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

Severity Score

6.1

Related Resources (7)

Url: http://www.securitytracker.com/id/1038950

Url: https://support.apple.com/HT207921

Url: https://nvd.nist.gov/vuln/detail/CVE-2017-7059

Url: https://support.apple.com/HT207924

Url: http://www.securityfocus.com/bid/99886

Url: https://support.apple.com/HT207923

Url: https://www.mend.io/vulnerability-database/CVE-2017-7059

Severity Score

6.1

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3.1

Base Score:	6.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us