CVE-2018-0499: Canonical Ubuntu Linux

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

Affected products

• Canonical Ubuntu Linux: version 17.10 only; version 18.04 only
• Xapian Xapian-Core: before 1.4.6 (fixed in 1.4.6)

Published 2018-07-02. Last modified 2026-06-17.