CVE-2008-4698
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows...
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
Exploit likelihood
What each source reports
NVD Score used
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
- Record
CVE-2008-4698- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
- Record
CVE-2008-4698- Updated
- 2026-11-02
EUVDEUVD-2008-4678 No score
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
- Record
EUVD-2008-4678- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xfwh-gc4w-mg75 No score
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows...
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
- Record
GHSA-xfwh-gc4w-mg75- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4698 is a medium vulnerability (CVSS 5.8) in Opera Browser, published October 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.
References
secunia.com/advisories/32394
opera.com/docs/changelogs/mac/961
vupen.com/english/advisories/2008/2873
openwall.com/lists/oss-security/2008/10/21/6
Show 12 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/46005
lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html
securityfocus.com/bid/31842
security.gentoo.org/glsa/glsa-200811-01.xml
nvd.nist.gov/vuln/detail/CVE-2008-4698
github.com/advisories/GHSA-xfwh-gc4w-mg75