CVE-2014-2326

Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

3.22% chance of exploitation in the next 30 days, 87th percentile

Published

2014-03-27

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/125849/Deutsche-Telekom-CERT-Advisory-DTC-A-20140324…

References

• CVE Record
• NVD entry

Related

• CVE-2014-2324
• CVE-2014-2339
• CVE-2014-2323
• CVE-2014-2340
• CVE-2014-2321
• CVE-2014-2341