{"api_version":"1","generated_at":"2026-07-23T07:36:29+00:00","cve":"CVE-2007-4465","urls":{"html":"https://cve.report/CVE-2007-4465","api":"https://cve.report/api/cve/CVE-2007-4465.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4465","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4465"},"summary":{"title":"CVE-2007-4465","description":"Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-09-14 00:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a","CWE-79 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Advisories | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html","name":"http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"[SECURITY] Fedora 7 Update: httpd-2.2.6-1.fc7","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","name":"http://www.redhat.com/support/errata/RHSA-2008-0004.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"HPSBUX02365 SSRT080118 rev.1 - HP-UX Running Apache, Remote Cross Site Scripting (XSS) or Denial of Service (DoS) - c01539432 - \r\n\t\tHP Business Support Center","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"ASA-2008-032 (RHSA-2008-0006)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","name":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html","name":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"This page provides Security Information. : Fujitsu Global","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.2.6","name":"http://www.apache.org/dist/httpd/CHANGES_2.2.6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"404 Not Found","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/27563","name":"http://secunia.com/advisories/27563","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Gentoo update for apache - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/479237/100/0/threaded","name":"http://www.securityfocus.com/archive/1/479237/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36586","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36586","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-575-1","name":"http://www.ubuntu.com/usn/usn-575-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-575-1: Apache vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1019194","name":"http://securitytracker.com/id?1019194","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Apache Input Validation Hole in Mod_AutoIndex When the Character Set is Undefined May Permit Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28467","name":"http://secunia.com/advisories/28467","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Red Hat update for httpd - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/30430","name":"http://secunia.com/advisories/30430","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","name":"http://www.redhat.com/support/errata/RHSA-2008-0008.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","name":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA08-150A -- Apple Updates for Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28471","name":"http://secunia.com/advisories/28471","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Red Hat update for apache - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","name":"http://marc.info/?l=bugtraq&m=125631037611762&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"'[security bulletin] HPSBUX02465 SSRT090192 rev.1 - HP-UX Running Apache-based Web Server, Remote Den' - MARC","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2007_61_apache2.html","name":"http://www.novell.com/linux/security/advisories/2007_61_apache2.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/33105","name":"http://secunia.com/advisories/33105","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25653","name":"http://www.securityfocus.com/bid/25653","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"],"title":"Apache Mod_AutoIndex.C Undefined Charset Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/31651","name":"http://secunia.com/advisories/31651","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"HP-UX update for Apache - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28749","name":"http://secunia.com/advisories/28749","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Ubuntu update for apache2 - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","name":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"title":"APPLE-SA-2008-05-28 Security Update 2008-003 and Mac OS X v10.5.3","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","name":"http://marc.info/?l=bugtraq&m=124654546101607&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3113","name":"http://securityreason.com/securityalert/3113","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"SecurityReason - Apache2 Undefined Charset UTF-7 XSS Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/achievement_securityalert/46","name":"http://securityreason.com/achievement_securityalert/46","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"SecurityReason - Apache2 Undefined Charset UTF-7 XSS Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/27732","name":"http://secunia.com/advisories/27732","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"SUSE update for apache2 - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200711-06.xml","name":"http://security.gentoo.org/glsa/glsa-200711-06.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Gentoo Linux Documentation\n--\n  Apache: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/28607","name":"http://secunia.com/advisories/28607","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Avaya Products httpd Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","name":"http://www.redhat.com/support/errata/RHSA-2008-0006.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0911.html","name":"http://www.redhat.com/support/errata/RHSA-2007-0911.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26842","name":"http://secunia.com/advisories/26842","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Fedora update for httpd - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","name":"http://www.redhat.com/support/errata/RHSA-2008-0005.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1697","name":"http://www.vupen.com/english/advisories/2008/1697","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35650","name":"http://secunia.com/advisories/35650","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"HP-UX Apache Web Server Suite Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26952","name":"http://secunia.com/advisories/26952","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Fedora update for httpd - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html","name":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[SECURITY] Fedora Core 6 Update: httpd-2.2.6-1.fc6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=186219","name":"http://bugs.gentoo.org/show_bug.cgi?id=186219","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Gentoo Bug 186219 - www-servers/apache Multiple issues (CVE-2006-{5752}, CVE-2007-{1862,1863,3304,3847,4465})","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4465","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4465","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4465","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apache","cpe5":"http_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2007-4465","organization":"Red Hat","lastmodified":"2007-09-18","contributor":"Mark J Cox","statementText":"This is actually a flaw in browsers that do not derive the response character set as required by RFC 2616. This does not affect the default configuration of Apache httpd in Red Hat products and will only affect customers who have removed the "AddDefaultCharset" directive and are using directory indexes. The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-4465","cve_year":"2007","cve_id":"4465","crc32":"6cd46bcb"},{"cvename":"CVE-2007-4465","organization":"Apache","lastmodified":"2007-09-14","contributor":"Mark J Cox","statementText":"The Apache security team believe that this issue is due to web browsers that are violating RFC2616. However, Apache 2.2.6 and 2.0.61 add a workaround for such browsers by adding Type and Charset options to IndexOptions directive. This allows a site administrator to explicitly set the content-type and charset of the generated directory index page.","cve_year":"2007","cve_id":"4465","crc32":"efee650d"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:53:56.077Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2008:0005","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html"},{"name":"3113","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3113"},{"name":"28749","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28749"},{"name":"oval:org.mitre.oval:def:6089","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089"},{"name":"HPSBUX02465","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"26952","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26952"},{"name":"31651","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31651"},{"name":"SSRT090085","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"25653","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25653"},{"name":"27563","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27563"},{"name":"27732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27732"},{"name":"1019194","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019194"},{"name":"RHSA-2007:0911","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2007-0911.html"},{"name":"RHSA-2008:0006","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/479237/100/0/threaded"},{"name":"oval:org.mitre.oval:def:10929","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929"},{"name":"SSRT090192","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"TA08-150A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html"},{"name":"SUSE-SA:2007:061","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://www.novell.com/linux/security/advisories/2007_61_apache2.html"},{"name":"FEDORA-2007-2214","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html"},{"name":"RHSA-2008:0008","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html"},{"name":"MDVSA-2008:014","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014"},{"name":"HPSBUX02365","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"30430","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/30430"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.apache.org/dist/httpd/CHANGES_2.2.6"},{"name":"APPLE-SA-2008-05-28","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm"},{"name":"33105","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33105"},{"name":"apache-utf7-xss(36586)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36586"},{"name":"28467","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28467"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html"},{"name":"RHSA-2008:0004","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html"},{"name":"28607","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28607"},{"name":"GLSA-200711-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200711-06.xml"},{"name":"HPSBUX02431","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"FEDORA-2007-707","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html"},{"name":"28471","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28471"},{"name":"ADV-2008-1697","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1697"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","tags":["third-party-advisory","x_refsource_SREASONRES","x_transferred"],"url":"http://securityreason.com/achievement_securityalert/46"},{"name":"RHSA-2008:0261","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html"},{"name":"USN-575-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-575-1"},{"name":"26842","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26842"},{"name":"SSRT080118","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"35650","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35650"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.gentoo.org/show_bug.cgi?id=186219"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2007-4465","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-01-05T17:42:37.598591Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-01-17T14:50:38.126Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-09-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"RHSA-2008:0005","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html"},{"name":"3113","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3113"},{"name":"28749","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28749"},{"name":"oval:org.mitre.oval:def:6089","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089"},{"name":"HPSBUX02465","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"26952","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26952"},{"name":"31651","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31651"},{"name":"SSRT090085","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"25653","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25653"},{"name":"27563","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27563"},{"name":"27732","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27732"},{"name":"1019194","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019194"},{"name":"RHSA-2007:0911","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2007-0911.html"},{"name":"RHSA-2008:0006","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/479237/100/0/threaded"},{"name":"oval:org.mitre.oval:def:10929","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929"},{"name":"SSRT090192","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"TA08-150A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html"},{"name":"SUSE-SA:2007:061","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://www.novell.com/linux/security/advisories/2007_61_apache2.html"},{"name":"FEDORA-2007-2214","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html"},{"name":"RHSA-2008:0008","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html"},{"name":"MDVSA-2008:014","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014"},{"name":"HPSBUX02365","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"30430","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/30430"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.apache.org/dist/httpd/CHANGES_2.2.6"},{"name":"APPLE-SA-2008-05-28","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm"},{"name":"33105","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33105"},{"name":"apache-utf7-xss(36586)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36586"},{"name":"28467","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28467"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html"},{"name":"RHSA-2008:0004","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html"},{"name":"28607","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28607"},{"name":"GLSA-200711-06","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200711-06.xml"},{"name":"HPSBUX02431","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"FEDORA-2007-707","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html"},{"name":"28471","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28471"},{"name":"ADV-2008-1697","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1697"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","tags":["third-party-advisory","x_refsource_SREASONRES"],"url":"http://securityreason.com/achievement_securityalert/46"},{"name":"RHSA-2008:0261","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html"},{"name":"USN-575-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-575-1"},{"name":"26842","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26842"},{"name":"SSRT080118","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"35650","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35650"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.gentoo.org/show_bug.cgi?id=186219"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-4465","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"RHSA-2008:0005","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0005.html"},{"name":"3113","refsource":"SREASON","url":"http://securityreason.com/securityalert/3113"},{"name":"28749","refsource":"SECUNIA","url":"http://secunia.com/advisories/28749"},{"name":"oval:org.mitre.oval:def:6089","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089"},{"name":"HPSBUX02465","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"26952","refsource":"SECUNIA","url":"http://secunia.com/advisories/26952"},{"name":"31651","refsource":"SECUNIA","url":"http://secunia.com/advisories/31651"},{"name":"SSRT090085","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"25653","refsource":"BID","url":"http://www.securityfocus.com/bid/25653"},{"name":"27563","refsource":"SECUNIA","url":"http://secunia.com/advisories/27563"},{"name":"27732","refsource":"SECUNIA","url":"http://secunia.com/advisories/27732"},{"name":"1019194","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019194"},{"name":"RHSA-2007:0911","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2007-0911.html"},{"name":"RHSA-2008:0006","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0006.html"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/479237/100/0/threaded"},{"name":"oval:org.mitre.oval:def:10929","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929"},{"name":"SSRT090192","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=125631037611762&w=2"},{"name":"TA08-150A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA08-150A.html"},{"name":"SUSE-SA:2007:061","refsource":"SUSE","url":"http://www.novell.com/linux/security/advisories/2007_61_apache2.html"},{"name":"FEDORA-2007-2214","refsource":"FEDORA","url":"http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html"},{"name":"RHSA-2008:0008","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0008.html"},{"name":"MDVSA-2008:014","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:014"},{"name":"HPSBUX02365","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"30430","refsource":"SECUNIA","url":"http://secunia.com/advisories/30430"},{"name":"http://www.apache.org/dist/httpd/CHANGES_2.2.6","refsource":"CONFIRM","url":"http://www.apache.org/dist/httpd/CHANGES_2.2.6"},{"name":"APPLE-SA-2008-05-28","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2008//May/msg00001.html"},{"name":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm","refsource":"CONFIRM","url":"http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm"},{"name":"33105","refsource":"SECUNIA","url":"http://secunia.com/advisories/33105"},{"name":"apache-utf7-xss(36586)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36586"},{"name":"28467","refsource":"SECUNIA","url":"http://secunia.com/advisories/28467"},{"name":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html","refsource":"CONFIRM","url":"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html"},{"name":"RHSA-2008:0004","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0004.html"},{"name":"28607","refsource":"SECUNIA","url":"http://secunia.com/advisories/28607"},{"name":"GLSA-200711-06","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200711-06.xml"},{"name":"HPSBUX02431","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=124654546101607&w=2"},{"name":"FEDORA-2007-707","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html"},{"name":"28471","refsource":"SECUNIA","url":"http://secunia.com/advisories/28471"},{"name":"ADV-2008-1697","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1697"},{"name":"20070912 Apache2 Undefined Charset UTF-7 XSS Vulnerability","refsource":"SREASONRES","url":"http://securityreason.com/achievement_securityalert/46"},{"name":"RHSA-2008:0261","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html"},{"name":"USN-575-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-575-1"},{"name":"26842","refsource":"SECUNIA","url":"http://secunia.com/advisories/26842"},{"name":"SSRT080118","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432"},{"name":"35650","refsource":"SECUNIA","url":"http://secunia.com/advisories/35650"},{"name":"http://bugs.gentoo.org/show_bug.cgi?id=186219","refsource":"CONFIRM","url":"http://bugs.gentoo.org/show_bug.cgi?id=186219"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-4465","datePublished":"2007-09-14T00:00:00.000Z","dateReserved":"2007-08-21T00:00:00.000Z","dateUpdated":"2025-01-17T14:50:38.126Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-09-14 00:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a","CWE-79 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.61","matchCriteriaId":"9C551481-3F93-4186-85B9-7B07D94B86D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.6","matchCriteriaId":"D9EE889E-37B4-4DF6-8327-7D621E287F4F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4465","Ordinal":"1","Title":"CVE-2007-4465","CVE":"CVE-2007-4465","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4465","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.","Type":"Description","Title":"CVE-2007-4465"},{"CveYear":"2007","CveId":"4465","Ordinal":"2","NoteData":"2007-09-13","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4465","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}