CVE-2014-2966

2014-07-2615:55:03

CWE-264

CWE-20

[email protected]

web.nvd.nist.gov

cve-2014-2966

iso-8859-1 encoder

resin pro

unicode transformations

xss protection mechanism

remote attackers

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%

JSON

CPENameOperatorVersion
caucho:resincaucho resinle4.0.39
caucho:resincaucho resineq4.0.36
caucho:resincaucho resineq4.0.37
caucho:resincaucho resineq4.0.38

CPE	Name	Operator	Version
caucho:resin	caucho resin	le	4.0.39
caucho:resin	caucho resin	eq	4.0.36
caucho:resin	caucho resin	eq	4.0.37
caucho:resin	caucho resin	eq	4.0.38

References

caucho.com/products/resin/download#download

www.kb.cert.org/vuls/id/162308