Lucene search
HistoryAug 07, 2014 - 11:13 a.m.
CVE-2014-5191
cve-2014-5191
cross-site scripting
xss
ckeditor preview plugin
nvd
security advisory
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.7%
Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ckeditor:ckeditor | ckeditor | eq | 4.4.1 |
| ckeditor:ckeditor | ckeditor | eq | 4.4.0 |
| ckeditor:ckeditor | ckeditor | le | 4.4.2 |
Related
nessus
nessus
CKEditor Preview Plugin Unspecified XSS
2014-07-31 00:00:00
IBM WebSphere Portal CKEditor XSS (PI24992, PI26456)
2014-10-30 00:00:00
IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF15 Multiple Vulnerabilities
2015-04-17 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2015-02-11 16:10:59
debiancve
debiancve
CVE-2014-5191
2014-08-07 11:13:00
ibm
ibm
cvelist
cvelist
CVE-2014-5191
2014-08-07 10:00:00
ubuntucve
ubuntucve
CVE-2014-5191
2014-08-07 00:00:00
prion
prion
Cross site scripting
2014-08-07 11:13:00
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.7%
Related for CVE-2014-5191