CVE-2018-0499 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-0499 Interim 1 13 2025-03-01T01:19:33Z current 2021-05-30T14:06:36Z 2025-03-01T01:19:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-0499 A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Software Bootstrap Kit 12 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed libxapian-devel libxapian-devel-1.4.18-1.6 libxapian22 libxapian30 libxapian30-1.4.17-1.43 libxapian30-1.4.17-bp153.1.19 libxapian30-1.4.18-1.6 libxapian30-32bit libxapian30-32bit-1.4.18-1.6 xapian-core xapian-core-1.4.18-1.6 xapian-core-doc xapian-core-doc-1.4.18-1.6 xapian-core-examples xapian-core-examples-1.4.18-1.6 libxapian30-1.4.17-bp153.1.19 as a component of openSUSE Leap 15.3 libxapian30-1.4.17-1.43 as a component of openSUSE Leap 15.4 libxapian-devel-1.4.18-1.6 as a component of openSUSE Tumbleweed libxapian30-1.4.18-1.6 as a component of openSUSE Tumbleweed libxapian30-32bit-1.4.18-1.6 as a component of openSUSE Tumbleweed xapian-core-1.4.18-1.6 as a component of openSUSE Tumbleweed xapian-core-doc-1.4.18-1.6 as a component of openSUSE Tumbleweed xapian-core-examples-1.4.18-1.6 as a component of openSUSE Tumbleweed libxapian-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libxapian30 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 xapian-core as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 xapian-core-doc as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 xapian-core-examples as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libxapian-devel as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libxapian30 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xapian-core as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xapian-core-doc as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xapian-core-examples as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 xapian-core as a component of SUSE Linux Enterprise Software Bootstrap Kit 12 libxapian-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxapian22 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 xapian-core as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxapian-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxapian22 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 xapian-core as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxapian-devel as a component of openSUSE Leap 15.5 libxapian30 as a component of openSUSE Leap 15.5 libxapian30-32bit as a component of openSUSE Leap 15.5 xapian-core as a component of openSUSE Leap 15.5 xapian-core-doc as a component of openSUSE Leap 15.5 xapian-core-examples as a component of openSUSE Leap 15.5 libxapian-devel as a component of openSUSE Leap 15.6 libxapian30 as a component of openSUSE Leap 15.6 libxapian30-32bit as a component of openSUSE Leap 15.6 xapian-core as a component of openSUSE Leap 15.6 xapian-core-doc as a component of openSUSE Leap 15.6 xapian-core-examples as a component of openSUSE Leap 15.6 A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). CVE-2018-0499 openSUSE Leap 15.3:libxapian30-1.4.17-bp153.1.19 openSUSE Leap 15.4:libxapian30-1.4.17-1.43 openSUSE Tumbleweed:libxapian-devel-1.4.18-1.6 openSUSE Tumbleweed:libxapian30-1.4.18-1.6 openSUSE Tumbleweed:libxapian30-32bit-1.4.18-1.6 openSUSE Tumbleweed:xapian-core-1.4.18-1.6 openSUSE Tumbleweed:xapian-core-doc-1.4.18-1.6 openSUSE Tumbleweed:xapian-core-examples-1.4.18-1.6 SUSE Linux Enterprise Module for Package Hub 15 SP5:libxapian-devel SUSE Linux Enterprise Module for Package Hub 15 SP5:libxapian30 SUSE Linux Enterprise Module for Package Hub 15 SP5:xapian-core SUSE Linux Enterprise Module for Package Hub 15 SP5:xapian-core-doc SUSE Linux Enterprise Module for Package Hub 15 SP5:xapian-core-examples SUSE Linux Enterprise Module for Package Hub 15 SP6:libxapian-devel SUSE Linux Enterprise Module for Package Hub 15 SP6:libxapian30 SUSE Linux Enterprise Module for Package Hub 15 SP6:xapian-core SUSE Linux Enterprise Module for Package Hub 15 SP6:xapian-core-doc SUSE Linux Enterprise Module for Package Hub 15 SP6:xapian-core-examples SUSE Linux Enterprise Software Bootstrap Kit 12:xapian-core SUSE Linux Enterprise Software Development Kit 12 SP4:libxapian-devel SUSE Linux Enterprise Software Development Kit 12 SP4:libxapian22 SUSE Linux Enterprise Software Development Kit 12 SP4:xapian-core SUSE Linux Enterprise Software Development Kit 12 SP5:libxapian-devel SUSE Linux Enterprise Software Development Kit 12 SP5:libxapian22 SUSE Linux Enterprise Software Development Kit 12 SP5:xapian-core openSUSE Leap 15.5:libxapian-devel openSUSE Leap 15.5:libxapian30 openSUSE Leap 15.5:libxapian30-32bit openSUSE Leap 15.5:xapian-core openSUSE Leap 15.5:xapian-core-doc openSUSE Leap 15.5:xapian-core-examples openSUSE Leap 15.6:libxapian-devel openSUSE Leap 15.6:libxapian30 openSUSE Leap 15.6:libxapian30-32bit openSUSE Leap 15.6:xapian-core openSUSE Leap 15.6:xapian-core-doc openSUSE Leap 15.6:xapian-core-examples important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H