CVE-2008-2716 json
Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by mo…
published 2008-06-16 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-2710
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.0%
- EPSS 3.0% chance of exploitation in 30 days, percentile 87%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.
Patch / fix
Exploit prediction
2.98% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames
References
-
securityfocus.com
/bid/29684
vdb-entry, broken-link, patch, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2008-06/msg00005.html
vendor-advisory, third-party-advisory
-
opera.com
/docs/changelogs/windows/950/#security
broken-link, vendor-advisory
-
opera.com
/support/search/view/885/
broken-link, vendor-advisory
-
opera.com
/docs/changelogs/linux/950/#security
broken-link, vendor-advisory
-
vupen.com
/english/advisories/2008/1812
vdb-entry, broken-link
-
exchange.xforce.ibmcloud.com
/vulnerabilities/43033
vdb-entry, third-party-advisory
-
securitytracker.com
/id?1020292
vdb-entry, broken-link, third-party-advisory
-
secunia.com
/advisories/30682
third-party-advisory, broken-link
-
secunia.com
/advisories/30636
third-party-advisory, broken-link
Sources
- CVE List CVE-2008-2716
- NVD CVE-2008-2716
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.