NVD

Id
31866  
Name
CVE-2014-3740  
Description
Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbitrary web script or HTML via the Summary field in a ticket request to the portal page.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-09-11  
Modified Date
2015-07-31  
Seq
2014-3740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168063 31866 CVE-2014-3740 http://packetstormsecurity.com/files/126596/SpiceWorks-7.2.00174-Cross-Site-Scripting.html  View
168064 31866 CVE-2014-3740 http://packetstormsecurity.com/files/126994/SpiceWorks-IT-Ticketing-System-Cross-Site-Scripting.html  View
168065 31866 CVE-2014-3740 http://research.openflare.org/advisories/OF-2014-07/spiceworks_xss.txt  View
168066 31866 CVE-2014-3740 http://research.openflare.org/poc/OF-2014-07/spiceworks_crafted_ticket.mp4  View
168067 31866 CVE-2014-3740 20140608 CVE-2014-3740 - SpiceWorks Cross-site scripting  View
168068 31866 CVE-2014-3740 33330  View
168069 31866 CVE-2014-3740 20140607 CVE-2014-3740 - SpiceWorks Cross-site scripting  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15304 JVNDB-2014-004179 SpiceWorks におけるクロスサイトスクリプティングの脆弱性 SpiceWorks には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3740 71028 CVE-2014-3740 31866 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004179.html 2014-05-12 2014-09-16 View