Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "
CVE-2007-0896
MEDIUMCVSS v2 · 4.34.3WeaponizedEG-KEV Tier 2: WeaponizedEG-KEV is EchelonGraph's own tiering of exploitation signals from CISA KEV, CISA's SSVC data (Vulnrichment), ransomware data, public exploit-code references and EPSS.Tier 2 is not evidence of exploitation. It means a Metasploit module exists, or Exploit-DB marks a public exploit verified, or CISA's SSVC data says "public PoC" and EPSS is 50% or more. EchelonGraph does not test whether exploit code works.Signals for this CVE: an Exploit-DB entry Exploit-DB marks verified.First public exploit code on record: 2007-02-09 (Exploit-DB EDB-29573)EchelonGraph confidence 62%: a heuristic from the tier and the number of signals, not a measured probability.
EchelonGraph scoreLOW confidence
“—” beside the score: it is equal to NVD's CVSS v2 base score.
This CVE was only ever scored under CVSS v2.0. NVD CVSS v2.0 base 4.3 — NVD rates that MEDIUM (NVD's v2 bands: LOW 0.0–3.9 / MEDIUM 4.0–6.9 / HIGH 7.0–10.0; no CRITICAL band). Vector AV:N/AC:M/Au:N/C:N/I:P/A:N. CVSS v2 is an older, coarser metric than v3.1/v4.0 (no Scope, no User Interaction, no Attack Requirements), so it is not directly comparable to a v3 or v4 score. NVD has never re-scored this record under v3. EPSS predicts 2.7% exploitation probability in the next 30 days; it does not lift the v2 base. EchelonGraph's fixed weight for EG-KEV Tier 2 (Weaponized) sets EG Risk's exploitation input, not EPSS. Confidence: LOW.
Triggered by: NVD CVSS v2.0 (legacy fallback)
Sources: NVD CVSS v2.0
Also known asEUVD-2007-0892 (ENISA EUVD) · GHSA-vmm5-923q-2xmw (GitHub Security Advisories)Source: ENISA EUVD
4.3EG
EchelonGraph verdictPlan mitigationNo fix on record since 2007: check the vendor's advisory for a fixed release; until one is applied, restrict network exposure of the affected system or apply the vendor's mitigation on your normal schedule at low or medium mission impact and sooner than that at high (the SSVC decision on this page).
- Public exploit code is available (Exploit-DB, marked verified by Exploit-DB)
CISA-KEV: Not listedEPSS PROB: 2.7%CVSS v2: 4.3Exploit: Exploit-DB (verified)Exposed services: Not assessed
No fix has been recorded since the CVE record was published in 2007 — use a compensating control (WAF / firewall / segmentation) and check the vendor's advisory.
The CVE record's description, written by its CNA (MITRE Corporation), states the affected versions: "Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS f…" No release containing a fix is confirmed on record.