Read the docs

Xapian

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Xapian records in CISA KEV

No Xapian vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omega 1 record LOW Xapian-core 1 record LOW

Records

1 record in Xapian-core · all components

TI-2018-00456 CVE-2018-0499 · GHSA-7qw4-w7hf-22q3

Cross-site scripting in Xapian xapian-core before 1.4.6

Priority LOW 29

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01043 Published 2018-07-02 Fixed in 1.4.6 CWE-79
Open these records in search →