CVE-2014-5348

2022-10-0316:20:43

mitre

www.cve.org

cve-2014-5348

cross-site scripting

riverbed stingray

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.