Lucene search
MitreCVE-2014-6070HistorySep 11, 2014 - 2:16 p.m.
CVE-2014-6070
2014-09-1114:16:04
CWE-79
mitre
web.nvd.nist.gov
36
cve-2014-6070
cross-site scripting
xss
adiscon loganalyzer
security vulnerability
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
67.8%
Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1) index.php or (2) detail.php.
Affected configurations
Node
adisconloganalyzerRange≤3.6.5
ORadisconloganalyzerMatch3.6.0
ORadisconloganalyzerMatch3.6.1
ORadisconloganalyzerMatch3.6.2
ORadisconloganalyzerMatch3.6.3
ORadisconloganalyzerMatch3.6.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adiscon | loganalyzer | * | cpe:2.3:a:adiscon:loganalyzer:*:*:*:*:*:*:*:* |
| adiscon | loganalyzer | 3.6.0 | cpe:2.3:a:adiscon:loganalyzer:3.6.0:*:*:*:*:*:*:* |
| adiscon | loganalyzer | 3.6.1 | cpe:2.3:a:adiscon:loganalyzer:3.6.1:*:*:*:*:*:*:* |
| adiscon | loganalyzer | 3.6.2 | cpe:2.3:a:adiscon:loganalyzer:3.6.2:*:*:*:*:*:*:* |
| adiscon | loganalyzer | 3.6.3 | cpe:2.3:a:adiscon:loganalyzer:3.6.3:*:*:*:*:*:*:* |
| adiscon | loganalyzer | 3.6.4 | cpe:2.3:a:adiscon:loganalyzer:3.6.4:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2014-09-11 14:16:00
ubuntucve
ubuntucve
CVE-2014-6070
2014-09-11 00:00:00
cvelist
cvelist
CVE-2014-6070
2014-09-11 14:00:00
nessus
nessus
LogAnalyzer < 3.6.6 index.php / detail.php 'hostname' Parameter XSS
2014-12-05 00:00:00
exploitpack
exploitpack
Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting (Python)
2014-09-02 00:00:00
packetstorm
packetstorm
LogAnalyzer 3.6.5 Cross Site Scripting
2014-09-02 00:00:00
nvd
nvd
CVE-2014-6070
2014-09-11 14:16:04
debiancve
debiancve
CVE-2014-6070
2014-09-11 14:16:04
exploitdb
exploitdb
Syslog LogAnalyzer 3.6.5 - Persistent Cross-Site Scripting
2014-09-02 00:00:00
zdt
zdt
LogAnalyzer 3.6.5 Cross Site Scripting Vulnerability
2014-09-04 00:00:00
Syslog LogAnalyzer 3.6.5 - Stored XSS Exploit
2014-09-08 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.003
Percentile
67.8%
Related for CVE-2014-6070