CVE-2014-7263

2014-12-1200:00:00

jpcert

www.cve.org

AI Score

5.5

Confidence

High

EPSS

0.003

Percentile

69.8%

JSON

Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability than CVE-2014-7261.

References

jvn.jp/en/jp/JVN87910097/360573/index.html

jvn.jp/en/jp/JVN87910097/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000146