Lucene search

CVE-2014-5326

🗓️ 24 Nov 2014 02:03:59Reported by [email protected]Type

Cross-site scripting vulnerability in Direct Web Remoting allows remote code injectio

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Improper Neutralization of Input During Web Page Generation in Direct Web Remoting	17 May 202204:21	–	github
CVE	CVE-2014-5326	24 Nov 201402:59	–	cve
Cvelist	CVE-2014-5326	24 Nov 201402:00	–	cvelist
Prion	Cross site scripting	24 Nov 201402:59	–	prion
Japan Vulnerability Notes	JVN#52422792: Direct Web Remoting (DWR) vulnerable to cross-site scripting	14 Nov 201400:00	–	jvn
OSV	Improper Neutralization of Input During Web Page Generation in Direct Web Remoting	17 May 202204:21	–	osv
IBM Security Bulletins	Security Bulletin: Rational Synergy is affected by vulnerabilities (CVE-2014-5325 and CVE-2014-5326) in Java Open Source Direct Web Remoting library.	22 Dec 202016:37	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Change is affected by vulnerabilities (CVE-2014-5325 and CVE-2014-5326) in Java Open Source Direct Web Remoting library.	17 Jun 201805:00	–	ibm

Nvd

Node

directwebremoting direct_web_remotingRange≤2.0.10

directwebremoting direct_web_remotingMatch3.0rc1

directwebremoting direct_web_remotingMatch3.0rc2

Source	Link
jvn	www.jvn.jp/en/jp/JVN52422792/index.html
jvndb	www.jvndb.jvn.jp/jvndb/JVNDB-2014-000118

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Nov 2014 02:59Current

5.6Medium risk

Vulners AI Score5.6

CVSS24.3

EPSS0.001

CWE-79