製品・ソフトウェアに関する情報
TOPdesk における反射型クロスサイトスクリプティングの脆弱性
Title TOPdesk における反射型クロスサイトスクリプティングの脆弱性
Summary

TOPdesk には、反射型クロスサイトスクリプティングの脆弱性が存在します。

Possible impacts 反射型クロスサイトスクリプティング攻撃を実行される可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date April 7, 2017, midnight
Registration Date Aug. 7, 2017, 6:07 p.m.
Last Update Aug. 7, 2017, 6:07 p.m.
CVSS3.0 : 警告
Score 6.1
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS2.0 : 警告
Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected System
TOPdesk
TOPdesk 5.7.6 未満
TOPdesk 6.x
TOPdesk 7.03.019 未満の 7.x
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2017年08月07日]
  掲載
Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information
CVE-2017-7276
Summary

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

Publication Date July 5, 2017, 3:29 a.m.
Registration Date Jan. 26, 2021, 1:28 p.m.
Last Update Nov. 21, 2024, 12:31 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:topdesk:topdesk:6.07.022:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.04.019:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.027:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.013:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.023:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.005:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.031:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.02.012:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.022:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.01.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.006:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.02.016:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.005:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.013:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.011:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.024:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.021:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.11.024:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.02.014:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.019:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.016:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.06.011:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.025:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.011:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.010:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.018:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.013:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.015:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.005:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.04.004:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.030:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.015:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.11.003:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.040:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.013:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.04.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.02.013:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.006:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.06.010:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.033:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.01.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.021:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.014:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.012:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.06.005:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.024:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.006:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.026:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.015:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.04.023:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.012:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.022:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.021:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.025:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.017:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.04.021:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.019:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.05.006:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.022:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.01.024:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.025:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.05.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.019:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.009:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.002:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.022:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.016:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.023:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.037:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.04.006:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.05.023:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.06.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.002:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.018:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.010:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.05.016:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:*:*:*:*:*:*:*:* 5.7.5
cpe:2.3:a:topdesk:topdesk:6.06.014:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.029:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.002:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.001:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.014:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.004:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.10.026:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.017:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.09.011:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.01.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.008:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.005:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.12.015:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.05.020:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.03.007:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.08.034:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.02.021:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.11.015:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.07.010:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.11.030:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:6.06.003:*:*:*:*:*:*:*
cpe:2.3:a:topdesk:topdesk:7.06.014:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List