Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-1573
HistoryOct 13, 2014 - 1:55 a.m.

CVE-2014-1573

2014-10-1301:55:07
CWE-79
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

71.8%

JSON

Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not ensure that a scalar context is used for certain CGI parameters, which allows remote attackers to conduct cross-site scripting (XSS) attacks by sending three values for a single parameter name.

Affected configurations

Nvd
Node
fedoraprojectfedoraMatch19
OR
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
Node
mozillabugzillaMatch2.0
OR
mozillabugzillaMatch2.2
OR
mozillabugzillaMatch2.4
OR
mozillabugzillaMatch2.6
OR
mozillabugzillaMatch2.8
OR
mozillabugzillaMatch2.9
OR
mozillabugzillaMatch2.10
OR
mozillabugzillaMatch2.12
OR
mozillabugzillaMatch2.14
OR
mozillabugzillaMatch2.14.1
OR
mozillabugzillaMatch2.14.2
OR
mozillabugzillaMatch2.14.3
OR
mozillabugzillaMatch2.14.4
OR
mozillabugzillaMatch2.14.5
OR
mozillabugzillaMatch2.16
OR
mozillabugzillaMatch2.16rc1
OR
mozillabugzillaMatch2.16rc2
OR
mozillabugzillaMatch2.16.1
OR
mozillabugzillaMatch2.16.2
OR
mozillabugzillaMatch2.16.3
OR
mozillabugzillaMatch2.16.4
OR
mozillabugzillaMatch2.16.5
OR
mozillabugzillaMatch2.16.6
OR
mozillabugzillaMatch2.16.7
OR
mozillabugzillaMatch2.16.8
OR
mozillabugzillaMatch2.16.9
OR
mozillabugzillaMatch2.16.10
OR
mozillabugzillaMatch2.16.11
OR
mozillabugzillaMatch2.16_rc2
OR
mozillabugzillaMatch2.17
OR
mozillabugzillaMatch2.17.1
OR
mozillabugzillaMatch2.17.2
OR
mozillabugzillaMatch2.17.3
OR
mozillabugzillaMatch2.17.4
OR
mozillabugzillaMatch2.17.5
OR
mozillabugzillaMatch2.17.6
OR
mozillabugzillaMatch2.17.7
OR
mozillabugzillaMatch2.18
OR
mozillabugzillaMatch2.18rc1
OR
mozillabugzillaMatch2.18rc2
OR
mozillabugzillaMatch2.18rc3
OR
mozillabugzillaMatch2.18.1
OR
mozillabugzillaMatch2.18.2
OR
mozillabugzillaMatch2.18.3
OR
mozillabugzillaMatch2.18.4
OR
mozillabugzillaMatch2.18.5
OR
mozillabugzillaMatch2.18.6
OR
mozillabugzillaMatch2.18.6\+
OR
mozillabugzillaMatch2.18.7
OR
mozillabugzillaMatch2.18.8
OR
mozillabugzillaMatch2.18.9
OR
mozillabugzillaMatch2.19
OR
mozillabugzillaMatch2.19.1
OR
mozillabugzillaMatch2.19.2
OR
mozillabugzillaMatch2.19.3
OR
mozillabugzillaMatch2.20
OR
mozillabugzillaMatch2.20rc1
OR
mozillabugzillaMatch2.20rc2
OR
mozillabugzillaMatch2.20.1
OR
mozillabugzillaMatch2.20.2
OR
mozillabugzillaMatch2.20.3
OR
mozillabugzillaMatch2.20.4
OR
mozillabugzillaMatch2.20.5
OR
mozillabugzillaMatch2.20.6
OR
mozillabugzillaMatch2.20.7
OR
mozillabugzillaMatch2.21
OR
mozillabugzillaMatch2.21.1
OR
mozillabugzillaMatch2.21.2
OR
mozillabugzillaMatch2.21.2rc1
OR
mozillabugzillaMatch2.22
OR
mozillabugzillaMatch2.22rc1
OR
mozillabugzillaMatch2.22.1
OR
mozillabugzillaMatch2.22.2
OR
mozillabugzillaMatch2.22.3
OR
mozillabugzillaMatch2.22.4
OR
mozillabugzillaMatch2.22.5
OR
mozillabugzillaMatch2.22.6
OR
mozillabugzillaMatch2.22.7
OR
mozillabugzillaMatch2.23
OR
mozillabugzillaMatch2.23.1
OR
mozillabugzillaMatch2.23.2
OR
mozillabugzillaMatch2.23.3
OR
mozillabugzillaMatch2.23.4
OR
mozillabugzillaMatch3.0
OR
mozillabugzillaMatch3.0rc1
OR
mozillabugzillaMatch3.0.0
OR
mozillabugzillaMatch3.0.1
OR
mozillabugzillaMatch3.0.2
OR
mozillabugzillaMatch3.0.3
OR
mozillabugzillaMatch3.0.4
OR
mozillabugzillaMatch3.0.5
OR
mozillabugzillaMatch3.0.6
OR
mozillabugzillaMatch3.0.7
OR
mozillabugzillaMatch3.0.8
OR
mozillabugzillaMatch3.0.9
OR
mozillabugzillaMatch3.0.10
OR
mozillabugzillaMatch3.0.11
OR
mozillabugzillaMatch3.0_rc1
OR
mozillabugzillaMatch3.1.0
OR
mozillabugzillaMatch3.1.1
OR
mozillabugzillaMatch3.1.2
OR
mozillabugzillaMatch3.1.3
OR
mozillabugzillaMatch3.1.4
OR
mozillabugzillaMatch3.2
OR
mozillabugzillaMatch3.2rc1
OR
mozillabugzillaMatch3.2rc2
OR
mozillabugzillaMatch3.2.1
OR
mozillabugzillaMatch3.2.2
OR
mozillabugzillaMatch3.2.3
OR
mozillabugzillaMatch3.2.4
OR
mozillabugzillaMatch3.2.5
OR
mozillabugzillaMatch3.2.6
OR
mozillabugzillaMatch3.2.7
OR
mozillabugzillaMatch3.2.8
OR
mozillabugzillaMatch3.2.9
OR
mozillabugzillaMatch3.2.10
OR
mozillabugzillaMatch3.3
OR
mozillabugzillaMatch3.3.1
OR
mozillabugzillaMatch3.3.2
OR
mozillabugzillaMatch3.3.3
OR
mozillabugzillaMatch3.3.4
OR
mozillabugzillaMatch3.4
OR
mozillabugzillaMatch3.4rc1
OR
mozillabugzillaMatch3.4.1
OR
mozillabugzillaMatch3.4.2
OR
mozillabugzillaMatch3.4.3
OR
mozillabugzillaMatch3.4.4
OR
mozillabugzillaMatch3.4.5
OR
mozillabugzillaMatch3.4.6
OR
mozillabugzillaMatch3.4.7
OR
mozillabugzillaMatch3.4.8
OR
mozillabugzillaMatch3.4.9
OR
mozillabugzillaMatch3.4.10
OR
mozillabugzillaMatch3.4.11
OR
mozillabugzillaMatch3.4.12
OR
mozillabugzillaMatch3.4.13
OR
mozillabugzillaMatch3.5
OR
mozillabugzillaMatch3.5.1
OR
mozillabugzillaMatch3.5.2
OR
mozillabugzillaMatch3.5.3
OR
mozillabugzillaMatch3.6
OR
mozillabugzillaMatch3.6rc1
OR
mozillabugzillaMatch3.6.0
OR
mozillabugzillaMatch3.6.1
OR
mozillabugzillaMatch3.6.2
OR
mozillabugzillaMatch3.6.3
OR
mozillabugzillaMatch3.6.4
OR
mozillabugzillaMatch3.6.5
OR
mozillabugzillaMatch3.6.6
OR
mozillabugzillaMatch3.6.7
OR
mozillabugzillaMatch3.6.8
OR
mozillabugzillaMatch3.6.9
OR
mozillabugzillaMatch3.6.10
OR
mozillabugzillaMatch3.6.11
OR
mozillabugzillaMatch3.6.12
OR
mozillabugzillaMatch3.6.13
OR
mozillabugzillaMatch3.7
OR
mozillabugzillaMatch3.7.1
OR
mozillabugzillaMatch3.7.2
OR
mozillabugzillaMatch3.7.3
OR
mozillabugzillaMatch4.0
OR
mozillabugzillaMatch4.0rc1
OR
mozillabugzillaMatch4.0rc2
OR
mozillabugzillaMatch4.0.1
OR
mozillabugzillaMatch4.0.10
OR
mozillabugzillaMatch4.0.11
OR
mozillabugzillaMatch4.0.12
OR
mozillabugzillaMatch4.0.13
OR
mozillabugzillaMatch4.0.14
OR
mozillabugzillaMatch4.1
OR
mozillabugzillaMatch4.1.1
OR
mozillabugzillaMatch4.1.2
OR
mozillabugzillaMatch4.1.3
OR
mozillabugzillaMatch4.2
OR
mozillabugzillaMatch4.2rc1
OR
mozillabugzillaMatch4.2rc2
OR
mozillabugzillaMatch4.2.1
OR
mozillabugzillaMatch4.2.2
OR
mozillabugzillaMatch4.2.3
OR
mozillabugzillaMatch4.2.4
OR
mozillabugzillaMatch4.2.5
OR
mozillabugzillaMatch4.2.6
OR
mozillabugzillaMatch4.2.7
OR
mozillabugzillaMatch4.2.8
OR
mozillabugzillaMatch4.2.9
OR
mozillabugzillaMatch4.2.10
OR
mozillabugzillaMatch4.3
OR
mozillabugzillaMatch4.3.1
OR
mozillabugzillaMatch4.3.2
OR
mozillabugzillaMatch4.3.3
OR
mozillabugzillaMatch4.4
OR
mozillabugzillaMatch4.4rc1
OR
mozillabugzillaMatch4.4rc2
OR
mozillabugzillaMatch4.4.1
OR
mozillabugzillaMatch4.4.2
OR
mozillabugzillaMatch4.4.3
OR
mozillabugzillaMatch4.4.4
OR
mozillabugzillaMatch4.4.5
OR
mozillabugzillaMatch4.5
OR
mozillabugzillaMatch4.5.1
OR
mozillabugzillaMatch4.5.2
OR
mozillabugzillaMatch4.5.3
OR
mozillabugzillaMatch4.5.4
OR
mozillabugzillaMatch4.5.5
VendorProductVersionCPE
fedoraprojectfedora19cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
fedoraprojectfedora20cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
fedoraprojectfedora21cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
mozillabugzilla2.0cpe:2.3:a:mozilla:bugzilla:2.0:*:*:*:*:*:*:*
mozillabugzilla2.2cpe:2.3:a:mozilla:bugzilla:2.2:*:*:*:*:*:*:*
mozillabugzilla2.4cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*
mozillabugzilla2.6cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*
mozillabugzilla2.8cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*
mozillabugzilla2.9cpe:2.3:a:mozilla:bugzilla:2.9:*:*:*:*:*:*:*
mozillabugzilla2.10cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*
Rows per page:
1-10 of 2071

References

Related

prion 1
ubuntucve 1
cvelist 1
cve 1
nessus 8
freebsd 1
gentoo 1
openvas 4
fedora 4
securityvulns 3
mageia 1
prion
prion
Cross site scripting
2014-10-13 01:55:00
ubuntucve
ubuntucve
CVE-2014-1573
2014-10-13 00:00:00
cvelist
cvelist
CVE-2014-1573
2014-10-13 01:00:00
cve
cve
CVE-2014-1573
2014-10-13 01:55:07
nessus
nessus
Bugzilla < 4.0.15 / 4.2.11 / 4.4.6 / 4.5.6 Multiple Vulnerabilities
2015-02-09 00:00:00
Fedora 19 : bugzilla-4.2.11-1.fc19 (2014-12584)
2014-10-23 00:00:00
GLSA-201607-11 : Bugzilla: Multiple vulnerabilities
2016-07-21 00:00:00
freebsd
freebsd
Bugzilla multiple security issues
2014-10-06 00:00:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2016-07-20 00:00:00
openvas
openvas
Fedora Update for bugzilla FEDORA-2014-12584
2014-10-23 00:00:00
Mageia: Security Advisory (MGASA-2014-0412)
2022-01-28 00:00:00
Fedora Update for bugzilla FEDORA-2014-12530
2014-10-23 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: bugzilla-4.4.6-1.fc21
2014-11-01 17:10:00
[SECURITY] Fedora 19 Update: bugzilla-4.2.11-1.fc19
2014-10-22 08:50:36
[SECURITY] Fedora 20 Update: bugzilla-4.2.11-1.fc20
2014-10-22 08:51:49
securityvulns
securityvulns
Security advisory for Bugzilla 4.5.6, 4.4.6, 4.2.11, and 4.0.15
2014-10-14 00:00:00
[ MDVSA-2014:200 ] bugzilla
2014-11-03 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2014-11-03 00:00:00
mageia
mageia
Updated bugzilla packages fix security vulnerabilities
2014-10-09 18:39:32

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

71.8%

JSON
Related for NVD:CVE-2014-1573
prion1ubuntucve1cvelist1cve1nessus8freebsd1gentoo1openvas4fedora4securityvulns3mageia1