CVE-2014-1820: XSS

Published Aug 12, 2014

Updated

Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."

Affected Software

2 affected components

Microsoft SQL Server=2012-sp1

Microsoft SQL Server=2014

Event History

Aug 12, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-1820?

CVE-2014-1820 is classified as a medium severity vulnerability that enables cross-site scripting attacks.

How do I fix CVE-2014-1820?

To mitigate CVE-2014-1820, it is recommended to apply the latest security updates or patches provided by Microsoft for SQL Server 2012 SP1 and 2014.

What applications are affected by CVE-2014-1820?

CVE-2014-1820 affects Microsoft SQL Server 2012 SP1 and Microsoft SQL Server 2014 running on 64-bit platforms.

Can CVE-2014-1820 be exploited remotely?

Yes, CVE-2014-1820 can be exploited remotely by attackers through crafted URLs that inject arbitrary web scripts or HTML.

What is the impact of CVE-2014-1820?

The impact of CVE-2014-1820 includes the potential for attackers to execute malicious scripts in the context of the victim's browser.