Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-5267
HistorySep 30, 2014 - 12:00 a.m.

CVE-2014-5267

2014-09-3000:00:00
ubuntu.com
ubuntu.com
13

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.5%

modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31
allows remote attackers to have unspecified impact via a crafted DOCTYPE
declaration in an XRDS document.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchdrupal7< anyUNKNOWN

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

77.5%