{"id":"CVE-2018-20503","aliases":["EUVD-2018-13057","GHSA-rppp-89x8-v2j3"],"status":"published","title":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask...","description":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03904,"percentile":0.90347,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2019-05-07T18:25:28Z","modified":"2026-06-17T01:52:59Z","exploits":[{"source":"exploitdb","id":"EDB-46237","title":"SirsiDynix e-Library 3.5.x - Cross-Site Scripting","type":"webapps","platform":"cgi","date":"2019-01-24","url":"https://www.exploit-db.com/exploits/46237"}],"products":[{"vendor":"alliedtelesis","product":"8100l\\/8_firmware"}],"references":[{"url":"http://packetstormsecurity.com/files/151327/SirsiDynix-e-Library-3.5.x-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/46237/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://pentest.com.tr/exploits/Allied-Telesis-8100L-8-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20503"},{"url":"https://www.exploit-db.com/exploits/46237"},{"url":"https://github.com/advisories/GHSA-rppp-89x8-v2j3"}],"sources":{"cve":[{"id":"CVE-2018-20503","description":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.","status":"published","published":"2019-05-07T18:25:28Z","modified":"2024-08-05T12:05:17.383Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-13057","description":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.","status":"published","published":"2019-05-07T18:25:28Z","modified":"2024-08-05T12:05:17Z","updated_at":"2026-11-03T02:39:30.323824Z"}],"ghsa":[{"id":"GHSA-rppp-89x8-v2j3","title":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask...","description":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.","status":"published","published":"2022-05-24T16:45:17Z","modified":"2024-04-04T00:32:38Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:55:50.552757Z"}],"nvd":[{"id":"CVE-2018-20503","description":"Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.","status":"published","published":"2019-05-07T19:29:00.537Z","modified":"2026-06-17T01:52:59.23Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:57.307075Z"}]}}