CVE-2014-4694

2014-07-0210:00:00

mitre

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via unspecified variables.

References

pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc