CVE-2013-4968

6.1 mediumEPSS 0.8%

Medium (6.1) in puppet puppet enterprise. EPSS 0.8% chance of exploitation in the next 30 days.

Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-12-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

puppet:puppet_enterprise

References

http://puppetlabs.com/security/cve/cve-2013-4968
http://puppetlabs.com/security/cve/cve-2013-4968

Check your stack JSON