Oval Definition:oval:org.opensuse.security:def:20180499
Revision Date:2022-09-02Version:1
Title:CVE-2018-0499
Description:

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2018-0499
SUSE CVE-2018-0499
Platform(s):openSUSE Leap 15.3
openSUSE Leap 15.4
openSUSE Tumbleweed
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP5
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • libxapian-devel-1.4.18-1.6 is installed
  • OR libxapian30-1.4.18-1.6 is installed
  • OR libxapian30-32bit-1.4.18-1.6 is installed
  • OR xapian-core-1.4.18-1.6 is installed
  • OR xapian-core-doc-1.4.18-1.6 is installed
  • OR xapian-core-examples-1.4.18-1.6 is installed
  • Definition Synopsis
  • openSUSE Leap 15.3 is installed
  • AND Package Information
  • libxapian30-1.4.17-bp153.1.19 is installed
  • AND libxapian30 is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 15.4 is installed
  • AND Package Information
  • libxapian30-1.4.17-1.43 is installed
  • AND libxapian30 is signed with openSUSE key
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND Package Information
  • libxapian-devel is not affected
  • OR libxapian22 is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND xapian-core is not affected
  • BACK