Lucene search
HistoryFeb 06, 2014 - 11:55 p.m.
CVE-2014-0330
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.1%
Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABEL_ID parameter.
Affected configurations
Node
dellkace_k1000_systems_management_appliance_softwareMatch5.5.90545
dellkace_k1000_systems_management_applianceMatch-
Related
prion
prion
Cross site scripting
2014-02-06 23:55:00
cert
cert
seebug
seebug
Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞
2014-02-20 00:00:00
cvelist
cvelist
CVE-2014-0330
2014-02-06 23:00:00
cve
cve
CVE-2014-0330
2014-02-06 23:55:03
openvas
openvas
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.1%
Related for NVD:CVE-2014-0330