CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2014/07/24 2:55 p.m.•12 views

CVE-2014-2971

Cross-site scripting XSS vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter...

3.5CVSS5.3AI score0.00558EPSS

Exploits0References1

Prion•added 2014/07/24 2:55 p.m.•15 views

Cross site scripting

3.5CVSS5.7AI score0.00558EPSS

Exploits0References1Affected Software1

CVE•added 2014/07/24 2:0 p.m.•48 views

CVE-2014-2971

The CVE-2014-2971 issue is a Cross-Site Scripting (XSS) in MicroPact iComplaints’ AddStdLetter.jsp, exploitable by remote authenticated users via the description parameter. Affected version is iComplaints before 8.0.2.1.8.8014. The CERT/NVD entries describe potential script execution in the user’...

3.5CVSS5.4AI score0.00558EPSS

Exploits0References1Affected Software1