Lucene search
PRIOn knowledge basePRION:CVE-2014-7987HistoryOct 31, 2014 - 2:55 p.m.
Cross site scripting
2014-10-3114:55:00
PRIOn knowledge base
www.prio-n.com
4
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.6%
Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors action to install/index.php.
Related
cve
cve
CVE-2014-7987
2014-10-31 14:55:00
packetstorm
packetstorm
EspoCRM 2.5.2 XSS / LFI / Access Control
2014-10-29 00:00:00
zdt
zdt
EspoCRM 2.5.2 XSS / LFI / Access Control Vulnerabilities
2014-10-30 00:00:00
securityvulns
securityvulns
Multiple vulnerabilities in EspoCRM
2014-11-03 00:00:00
htbridge
htbridge
Multiple vulnerabilities in EspoCRM
2014-10-08 00:00:00
openvas
openvas
EspoCRM '/install/index.php' Multiple Vulnerabilities
2014-10-30 00:00:00
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.6%
Related for PRION:CVE-2014-7987