Lucene search

K
nvd[email protected]NVD:CVE-2014-7292
HistoryOct 23, 2014 - 2:55 p.m.

CVE-2014-7292

2014-10-2314:55:02
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%

Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

Affected configurations

NVD
Node
newtelligencedasblogMatch2.12.1.8102.813
OR
newtelligencedasblogMatch2.22.2.8279.16125
OR
newtelligencedasblogMatch2.32.3.9074.18820

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%

Related for NVD:CVE-2014-7292