Lucene search

K
cve[email protected]CVE-2014-8658
HistoryNov 06, 2014 - 3:55 p.m.

CVE-2014-8658

2014-11-0615:55:11
CWE-79
web.nvd.nist.gov
21
cve-2014-8658
cross-site scripting
xss
refinedwiki original theme
confluence
nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.action.

Affected configurations

NVD
Node
refinedwikirefinedwiki_original_themeMatch3.5confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.1confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.2confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.3confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.4confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.5confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.6confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.7confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.8confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.9confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.10confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.11confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.12confluence
OR
refinedwikirefinedwiki_original_themeMatch3.5.13confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.1confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.2confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.3confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.4confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.5confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.6confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.7confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.8confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.9confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.10confluence
OR
refinedwikirefinedwiki_original_themeMatch4.0.11confluence

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

Related for CVE-2014-8658