CVE-2017-9813 is a Cross-Site Scripting (XSS) vulnerability affecting Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312. An unauthenticated attacker could exploit this by manipulating the scriptName parameter in the licenseKeyInfo action method, requiring user interaction. While the CVSS score is 6.1 (MEDIUM), its FAUCET Risk Score of 85/100 indicates a higher practical risk, with potential for low impact on confidentiality and integrity. There is no evidence of active exploitation, but an ExploitDB entry exists, and it has garnered limited community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 8.0.3.297CPE matchmatch criteria | cpe:2.3:a:kaspersky:anti-virus_for_linux_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.