Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-6439
HistoryOct 10, 2014 - 1:00 a.m.

CVE-2014-6439

2014-10-1001:00:00
mitre
www.cve.org

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Related

openvas 2
osv 1
cve 1
freebsd 1
prion 1
nessus 1
securityvulns 2
github 1
nvd 1
openvas
openvas
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Linux
2016-06-28 00:00:00
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Windows
2016-06-23 00:00:00
osv
osv
Cross-site scripting in Elasticsearch
2022-05-14 02:51:14
cve
cve
CVE-2014-6439
2014-10-10 01:55:11
freebsd
freebsd
elasticsearch -- cross site scripting vulnerability in the CORS functionality
2014-10-01 00:00:00
prion
prion
Cross site scripting
2014-10-10 01:55:00
nessus
nessus
FreeBSD : elasticsearch -- XSS vulnerability in the CORS functionality (5951fb49-1ba2-11e5-b43d-002590263bf5)
2015-06-26 00:00:00
securityvulns
securityvulns
Elasticsearch vulnerability CVE-2014-6439
2014-10-05 00:00:00
elasticsearch weak CORS policy
2014-10-05 00:00:00
github
github
Cross-site scripting in Elasticsearch
2022-05-14 02:51:14
nvd
nvd
CVE-2014-6439
2014-10-10 01:55:11

5.5 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON
Related for CVELIST:CVE-2014-6439
openvas2osv1cve1freebsd1prion1nessus1securityvulns2github1nvd1