NVD

Id
32852  
Name
CVE-2014-5026  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a (1) Graph Tree Title in a delete or (2) edit action; (3) CDEF Name, (4) Data Input Method Name, or (5) Host Templates Name in a delete action; (6) Data Source Title; (7) Graph Title; or (8) Graph Template Name in a delete or (9) duplicate action.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-20  
Modified Date
2016-12-21  
Seq
2014-5026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172549 32852 CVE-2014-5026 http://bugs.cacti.net/view.php?id=2456  View
172550 32852 CVE-2014-5026 openSUSE-SU-2015:0479  View
172551 32852 CVE-2014-5026 [oss-security] 20140724 Re: Duplicated CVE - Cacti XSS  View
172552 32852 CVE-2014-5026 DSA-3007  View
172553 32852 CVE-2014-5026 [oss-security] 20140722 Re: CVE request: cacti XSS  View
172554 32852 CVE-2014-5026 68759  View
172555 32852 CVE-2014-5026 cacti-cve20145026-xss(94816)  View
172556 32852 CVE-2014-5026 GLSA-201509-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16146 JVNDB-2014-005021 Cacti におけるクロスサイトスクリプティングの脆弱性 Cacti には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-5026 72315 CVE-2014-5026 32852 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005021.html 2014-07-04 2014-10-27 View