PT-2014-3591 · Google · Google Search Appliance

Publicado 2014-05-08 · Atualizado 2019-07-18 · CVE-2014-0362

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Search Appliance (GSA) versions prior to 7.0.14.G.216 Google Search Appliance (GSA) version 7.2 prior to 7.2.0.G.114

Description A cross-site scripting (XSS) issue exists when dynamic navigation is configured, allowing remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element.

Recommendations For Google Search Appliance (GSA) versions prior to 7.0.14.G.216, update to version 7.0.14.G.216 or later. For Google Search Appliance (GSA) version 7.2 prior to 7.2.0.G.114, update to version 7.2.0.G.114 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-0362

Produtos afetados

Google Search Appliance

Referências · 4

• http://securityfocus.com/bid/67176 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0362 · Nota
• http://kb.cert.org/vuls/id/673313 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0362 · Nota de Segurança