NVD

Id
32807  
Name
CVE-2014-4930  
Description
Multiple cross-site scripting (XSS) vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 build 9002 allow remote attackers to inject arbitrary web script or HTML via the (1) width, (2) height, (3) url, (4) helpP, (5) tab, (6) module, (7) completeData, (8) RBBNAME, (9) TC, (10) rtype, (11) eventCriteria, (12) q, (13) flushCache, or (14) product parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-29  
Modified Date
2015-09-16  
Seq
2014-4930  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172367 32807 CVE-2014-4930 http://packetstormsecurity.com/files/128012/ManageEngine-EventLog-Analyzer-7-Cross-Site-Scripting.html  View
172368 32807 CVE-2014-4930 20140827 ManageEngine EventLog Analyzer 7 Reflective cross-site scripting Vulnerability [CVE-2014-4930]  View
172369 32807 CVE-2014-4930 69420  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15128 JVNDB-2014-004003 ZOHO ManageEngine EventLog Analyzer の event/index2.do におけるクロスサイトスクリプティングの脆弱性 ZOHO ManageEngine EventLog Analyzer の event/index2.do には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-4930 72219 CVE-2014-4930 32807 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004003.html 2014-08-26 2014-09-03 View