XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.
CVSS Details
- CVSS 4.0 Base Score: 8.2 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-develUpgrade xmlrpc-cUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-client-debuginfoNo solution existsUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-appsUpgrade xmlrpc-c-debuginfo | Aug 5, 2026 | Jul 27, 2026 |
| Rocky_linux | — | Upgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade xmlrpc-c-develUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-c++-debuginfo | Sep 2, 2026 | Sep 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub