Lucene search
HistoryApr 23, 2014 - 3:55 p.m.
CVE-2014-2554
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
53.1%
OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.
Affected configurations
Node
opensuseopensuseMatch12.3
ORopensuseopensuseMatch13.1
Node
otrsotrsMatch3.1.0
ORotrsotrsMatch3.1.1
ORotrsotrsMatch3.1.2
ORotrsotrsMatch3.1.3
ORotrsotrsMatch3.1.4
ORotrsotrsMatch3.1.5
ORotrsotrsMatch3.1.6
ORotrsotrsMatch3.1.7
ORotrsotrsMatch3.1.8
ORotrsotrsMatch3.1.10
ORotrsotrsMatch3.1.11
ORotrsotrsMatch3.1.13
ORotrsotrsMatch3.1.14
ORotrsotrsMatch3.1.15
ORotrsotrsMatch3.1.16
ORotrsotrsMatch3.1.17
ORotrsotrsMatch3.1.18
ORotrsotrsMatch3.1.19
ORotrsotrsMatch3.1.20
Node
otrsotrsMatch3.2.0
ORotrsotrsMatch3.2.0beta1
ORotrsotrsMatch3.2.0beta2
ORotrsotrsMatch3.2.0beta3
ORotrsotrsMatch3.2.0beta4
ORotrsotrsMatch3.2.0beta5
ORotrsotrsMatch3.2.0rc1
ORotrsotrsMatch3.2.1
ORotrsotrsMatch3.2.2
ORotrsotrsMatch3.2.3
ORotrsotrsMatch3.2.4
ORotrsotrsMatch3.2.5
ORotrsotrsMatch3.2.6
ORotrsotrsMatch3.2.10
ORotrsotrsMatch3.2.11
ORotrsotrsMatch3.2.12
ORotrsotrsMatch3.2.13
ORotrsotrsMatch3.2.14
ORotrsotrsMatch3.2.15
Node
otrsotrsMatch3.3.0
ORotrsotrsMatch3.3.0beta1
ORotrsotrsMatch3.3.0beta2
ORotrsotrsMatch3.3.0beta3
ORotrsotrsMatch3.3.0beta4
ORotrsotrsMatch3.3.0beta5
ORotrsotrsMatch3.3.0rc1
ORotrsotrsMatch3.3.1
ORotrsotrsMatch3.3.2
ORotrsotrsMatch3.3.3
ORotrsotrsMatch3.3.4
ORotrsotrsMatch3.3.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| opensuse | opensuse | 12.3 | cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* |
| opensuse | opensuse | 13.1 | cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.0 | cpe:2.3:a:otrs:otrs:3.1.0:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.1 | cpe:2.3:a:otrs:otrs:3.1.1:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.2 | cpe:2.3:a:otrs:otrs:3.1.2:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.3 | cpe:2.3:a:otrs:otrs:3.1.3:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.4 | cpe:2.3:a:otrs:otrs:3.1.4:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.5 | cpe:2.3:a:otrs:otrs:3.1.5:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.6 | cpe:2.3:a:otrs:otrs:3.1.6:*:*:*:*:*:*:* |
| otrs | otrs | 3.1.7 | cpe:2.3:a:otrs:otrs:3.1.7:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2014-04-23 15:55:00
nessus
nessus
FreeBSD : otrs -- Clickjacking issue (ffa7c6e4-bb29-11e3-8136-60a44c524f57)
2014-04-04 00:00:00
openSUSE Security Update : otrs (openSUSE-SU-2014:0561-1)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : otrs (MDVSA-2014:111)
2014-06-10 00:00:00
debiancve
debiancve
CVE-2014-2554
2014-04-23 15:55:04
cvelist
cvelist
CVE-2014-2554
2014-04-23 14:00:00
cve
cve
CVE-2014-2554
2014-04-23 15:55:04
freebsd
freebsd
otrs -- Clickjacking issue
2014-04-01 00:00:00
seebug
seebug
OTRS Help DeskηΉε»ε«ζζΌζ΄
2014-04-02 00:00:00
ubuntucve
ubuntucve
CVE-2014-2554
2014-04-23 00:00:00
openvas
openvas
OTRS Help Desk Cross Site Scripting/Clickjacking Vulnerability
2014-04-03 00:00:00
Mageia: Security Advisory (MGASA-2014-0194)
2022-01-28 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:111 ] otrs
2014-06-14 00:00:00
mageia
mageia
Updated otrs packages fix multiple vulnerabilities
2014-04-24 23:11:34
osv
osv
otrs2 - security update
2017-09-30 00:00:00
otrs-3.3.16-37.1 on GA media
2024-06-15 00:00:00
debian
debian
[SECURITY] [DLA 1119-1] otrs2 security update
2017-09-30 19:35:53
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
53.1%
Related for NVD:CVE-2014-2554