CVE-2017-7109

State: Published
Severity: Not scored
Published: Oct 23, 2017
Updated: Aug 5, 2024
Reserved: Mar 17, 2017

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted web content that incorrectly interacts with the Application Cache policy.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

101005vdb-entry
https://support.apple.com/HT208141
1039384vdb-entry
https://support.apple.com/HT208142
https://support.apple.com/HT208113
https://support.apple.com/HT208112
1039428vdb-entry
https://support.apple.com/HT208116

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.