PRIOn knowledge basePRION:CVE-2014-2326

HistoryMar 27, 2014 - 4:55 p.m.

Cross site scripting

2014-03-2716:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.1%

JSON

Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
cactieq0.8.7103
debian_linuxeq7.0
fedoraeq20
fedoraeq19
opensuseeq13.1
opensuseeq13.2

Name	Operator	Version
cacti	eq	0.8.7103
debian_linux	eq	7.0
fedora	eq	20
fedora	eq	19
opensuse	eq	13.1
opensuse	eq	13.2

References

bugs.cacti.net/view.php?id=2431

lists.opensuse.org/opensuse-updates/2015-03/msg00034.html

packetstormsecurity.com/files/125849/Deutsche-Telekom-CERT-Advisory-DTC-A-20140324-001.html

secunia.com/advisories/57647

secunia.com/advisories/59203

svn.cacti.net/viewvc?view=rev&revision=7443

www.debian.org/security/2014/dsa-2970

www.securityfocus.com/archive/1/531588

www.securityfocus.com/bid/66390

bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768

lists.fedoraproject.org/pipermail/package-announce/2014-April/131821.html

lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.html

security.gentoo.org/glsa/201509-03

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for PRION:CVE-2014-2326