CVE-2014-4722: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4722?
The severity of CVE-2014-4722 is classified as medium due to its potential to allow attackers to execute arbitrary web scripts.
How do I fix CVE-2014-4722?
To fix CVE-2014-4722, ensure that you are using the latest version of OCS Inventory NG that includes security patches for the identified XSS vulnerabilities.
What types of attacks can CVE-2014-4722 facilitate?
CVE-2014-4722 can facilitate cross-site scripting (XSS) attacks, allowing remote attackers to inject malicious scripts into web pages.
Which version of OCS Inventory NG is affected by CVE-2014-4722?
Versions of OCS Inventory NG prior to the security update addressing CVE-2014-4722 are susceptible to these XSS vulnerabilities.
What are the potential impacts of CVE-2014-4722 on user accounts?
The potential impacts of CVE-2014-4722 on user accounts include session hijacking, redirecting to malicious sites, or executing unauthorized actions on behalf of users.