CVE-2015-6502

6.1 mediumEPSS 1.1%

Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string parameter, related to Login Redirect.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-12-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

puppet:puppet_enterprise

References

https://puppet.com/security/cve/CVE-2015-6502
https://puppet.com/security/cve/CVE-2015-6502

Check your stack JSON