CVE-2014-4907: XSS
Published Jul 11, 2014
·Updated
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohanaerrorpage.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.
Affected Software
21 affected components
OP5 Monitor=6.3.0
PNP4Nagios PNP4Nagios<=0.6.21
PNP4Nagios PNP4Nagios=0.6.0
PNP4Nagios PNP4Nagios=0.6.1
PNP4Nagios PNP4Nagios=0.6.2
PNP4Nagios PNP4Nagios=0.6.3
PNP4Nagios PNP4Nagios=0.6.4
PNP4Nagios PNP4Nagios=0.6.5
PNP4Nagios PNP4Nagios=0.6.6
PNP4Nagios PNP4Nagios=0.6.7
PNP4Nagios PNP4Nagios=0.6.10
PNP4Nagios PNP4Nagios=0.6.11
PNP4Nagios PNP4Nagios=0.6.12
PNP4Nagios PNP4Nagios=0.6.13
PNP4Nagios PNP4Nagios=0.6.14
PNP4Nagios PNP4Nagios=0.6.15
PNP4Nagios PNP4Nagios=0.6.16
PNP4Nagios PNP4Nagios=0.6.17
PNP4Nagios PNP4Nagios=0.6.18
PNP4Nagios PNP4Nagios=0.6.19
PNP4Nagios PNP4Nagios=0.6.20
Remediation
Patch Available
Event History
Jul 11, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4907?
CVE-2014-4907 has a medium severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-4907?
To fix CVE-2014-4907, upgrade PNP4Nagios to version 0.6.22 or later.
3
Which versions of PNP4Nagios are affected by CVE-2014-4907?
CVE-2014-4907 affects PNP4Nagios versions up to and including 0.6.21.
4
Can CVE-2014-4907 be exploited remotely?
Yes, CVE-2014-4907 can be exploited remotely by attackers through crafted parameters.
5
What type of vulnerability is CVE-2014-4907?
CVE-2014-4907 is a cross-site scripting (XSS) vulnerability.