CVE

Id
72688  
CVE No.
CVE-2014-5391  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property (location.hash).  
Phase
Assigned (20140822)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
685423 72688 CVE-2014-5391 BUGTRAQ:20140907 CVE-2014-5391 DOM-based Cross-Site Scripting (XSS) in "JobScheduler"  View
685424 72688 CVE-2014-5391 URL:http://www.securityfocus.com/archive/1/archive/1/533372/100/0/threaded  View
685425 72688 CVE-2014-5391 MISC:http://packetstormsecurity.com/files/128180/JobScheduler-Cross-Site-Scripting.html  View
685426 72688 CVE-2014-5391 MISC:http://www.christian-schneider.net/advisories/CVE-2014-5391.txt  View
685427 72688 CVE-2014-5391 CONFIRM:http://www.sos-berlin.com/modules/news/article.php?storyid=73  View
685428 72688 CVE-2014-5391 CONFIRM:http://www.sos-berlin.com/modules/news/article.php?storyid=74  View
685429 72688 CVE-2014-5391 CONFIRM:https://change.sos-berlin.com/browse/JS-1203  View
685430 72688 CVE-2014-5391 BID:69660  View
685431 72688 CVE-2014-5391 URL:http://www.securityfocus.com/bid/69660  View
685432 72688 CVE-2014-5391 XF:jobscheduler-cve20145391-xss(95797)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15110 JVNDB-2014-003985 Schneider Electric Wonderware Information Server における SQL インジェクションの脆弱性 Schneider Electric Wonderware Information Server (WIS) には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5399 72688 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003985.html  View