CVE-2014-0599

Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/59113
https://bugzilla.novell.com/show_bug.cgi?id=869975
https://www.novell.com/support/kb/doc.php?id=7010867
http://secunia.com/advisories/59113
https://bugzilla.novell.com/show_bug.cgi?id=869975
https://www.novell.com/support/kb/doc.php?id=7010867

Configurations

Configuration 1 (hide)

cpe:2.3:o:novell:open_enterprise_server:11.0:sp1:*:*:*:linux_kernel:*:*

History

21 Nov 2024, 02:02

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/59113 -~~	() http://secunia.com/advisories/59113 -
References	~~() https://bugzilla.novell.com/show_bug.cgi?id=869975 -~~	() https://bugzilla.novell.com/show_bug.cgi?id=869975 -
References	~~() https://www.novell.com/support/kb/doc.php?id=7010867 -~~	() https://www.novell.com/support/kb/doc.php?id=7010867 -

Information

Published : 2014-06-18 17:55

Updated : 2024-11-21 02:02

NVD link : CVE-2014-0599

Mitre link : CVE-2014-0599

CVE.ORG link : CVE-2014-0599

JSON object : View

Products Affected

novell

open_enterprise_server

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2014-0599", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-06-18T17:55:06.507", "references": [{"url": "http://secunia.com/advisories/59113", "source": "cve@mitre.org"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=869975", "source": "cve@mitre.org"}, {"url": "https://www.novell.com/support/kb/doc.php?id=7010867", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/59113", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=869975", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.novell.com/support/kb/doc.php?id=7010867", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de XSS en iPrint en Novell Open Enterprise Server (OES) 11 SP1 anterior a la actualizaci\u00f3n de mantenimiento (Maintenance Update) 9151 en Linux permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:02:28.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:novell:open_enterprise_server:11.0:sp1:*:*:*:linux_kernel:*:*", "vulnerable": true, "matchCriteriaId": "8BED3FC3-942C-4E55-84F5-B66D74E14DA3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}