CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. It may be remotely exploitable.
CVE
CVE-2017-2492
Severity
MEDIUM
CVSS
6.1
EPSS
1.08%
Java
Original NVD Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that triggers prototype mishandling.
Related CVEs
Other vulnerabilities affecting the same vendor(s)