Lucene search

MitreCVE-2014-7290

HistoryNov 19, 2014 - 3:59 p.m.

CVE-2014-7290

2014-11-1915:59:00

CWE-79

mitre

web.nvd.nist.gov

cve-2014-7290

xss

atlas systems

aeon 3.5

aeon 3.6

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) Action or (2) Form parameter to aeon.dll.

Affected configurations

Nvd

Node

atlas_systemsaeonMatch3.5

atlas_systemsaeonMatch3.6

VendorProductVersionCPE
atlas_systemsaeon3.5cpe:2.3:a:atlas_systems:aeon:3.5:*:*:*:*:*:*:*
atlas_systemsaeon3.6cpe:2.3:a:atlas_systems:aeon:3.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
atlas_systems	aeon	3.5	cpe:2.3:a:atlas_systems:aeon:3.5:::::::*
atlas_systems	aeon	3.6	cpe:2.3:a:atlas_systems:aeon:3.6:::::::*

References

packetstormsecurity.com/files/129114/Atlas-Systems-Aeon-3.5-3.6-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2014/Nov/32

tetraph.com/security/xss-vulnerability/cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/

exchange.xforce.ibmcloud.com/vulnerabilities/98705

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Related for CVE-2014-7290