Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2014-4722

Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

PublishedJul 07, 2014, 14:55

Published Bycve@mitre.org

Affected Versions

No affected versions found.

References

http://packetstormsecurity.com/files/127295/OCS-Inventory-NG-Cross-Site-Scripting.html
http://www.securityfocus.com/archive/1/532664/100/0/threaded
http://www.securityfocus.com/bid/68292

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)