CVE-2005-0407: Zakon Group Openconf

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.

Affected products

• Zakon Group Openconf: version 1.0 only; version 1.0_beta1 only; version 1.0_beta2 only; version 1.0_rc1 only; version 1.0_rc2 only; version 1.01 only; …

Published 2005-05-02. Last modified 2026-06-16.