{"api_version":"1","generated_at":"2026-07-23T15:26:54+00:00","cve":"CVE-2007-6406","urls":{"html":"https://cve.report/CVE-2007-6406","api":"https://cve.report/api/cve/CVE-2007-6406.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6406","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6406"},"summary":{"title":"CVE-2007-6406","description":"Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-12-17 18:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://securitytracker.com/id?1019047","name":"http://securitytracker.com/id?1019047","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CA eTrust Threat Management Console Input Validation Hole Permits HTML Injection Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/484607/100/0/threaded","name":"http://www.securityfocus.com/archive/1/484607/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38868","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38868","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3458","name":"http://securityreason.com/securityalert/3458","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Public Advisory 05-12-2007","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6406","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6406","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6406","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"etrust_threat_management_console","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:02:36.765Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1019047","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019047"},{"name":"20071205 [ELEYTT] Public Advisory 05-12-2007","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/484607/100/0/threaded"},{"name":"threatmanagement-ipaddress-xss(38868)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38868"},{"name":"3458","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3458"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1019047","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019047"},{"name":"20071205 [ELEYTT] Public Advisory 05-12-2007","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/484607/100/0/threaded"},{"name":"threatmanagement-ipaddress-xss(38868)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38868"},{"name":"3458","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3458"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6406","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1019047","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019047"},{"name":"20071205 [ELEYTT] Public Advisory 05-12-2007","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/484607/100/0/threaded"},{"name":"threatmanagement-ipaddress-xss(38868)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38868"},{"name":"3458","refsource":"SREASON","url":"http://securityreason.com/securityalert/3458"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6406","datePublished":"2007-12-17T18:00:00.000Z","dateReserved":"2007-12-17T00:00:00.000Z","dateUpdated":"2024-08-07T16:02:36.765Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-12-17 18:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_threat_management_console:*:*:*:*:*:*:*:*","matchCriteriaId":"C888FF54-B496-45FF-912C-232ECC52D105"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6406","Ordinal":"1","Title":"CVE-2007-6406","CVE":"CVE-2007-6406","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6406","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields.","Type":"Description","Title":"CVE-2007-6406"},{"CveYear":"2007","CveId":"6406","Ordinal":"2","NoteData":"2007-12-17","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6406","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}