CVE-2014-4694: XSS
Multiple cross-site scripting (XSS) vulnerabilities in suricataselectalias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via unspecified variables.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4694?
CVE-2014-4694 has a moderate severity rating due to its ability to allow remote attackers to exploit XSS vulnerabilities.
How do I fix CVE-2014-4694?
To fix CVE-2014-4694, update the pfSense software to version 2.1.5 or later that addresses the XSS vulnerabilities.
Which versions are affected by CVE-2014-4694?
CVE-2014-4694 affects pfSense versions 2.1.4 and earlier, along with the Suricata package version 1.0.5 and earlier.
What is the impact of CVE-2014-4694?
The impact of CVE-2014-4694 allows an attacker to inject arbitrary web script or HTML into the web interface.
What systems are at risk from CVE-2014-4694?
Systems running pfSense 2.1.4 and earlier, as well as the Suricata package before version 1.0.6, are at risk from CVE-2014-4694.