CVE-2014-5348: XSS
Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5348?
CVE-2014-5348 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2014-5348?
To fix CVE-2014-5348, it is recommended to upgrade to a patched version of Riverbed SteelApp Traffic Manager beyond 9.6 patchlevel 9620140312.
What is the impact of exploiting CVE-2014-5348?
Exploiting CVE-2014-5348 allows attackers to inject arbitrary web scripts or HTML, potentially compromising user sessions or defacing web content.
Which version of Riverbed SteelApp Traffic Manager is affected by CVE-2014-5348?
CVE-2014-5348 affects Riverbed SteelApp Traffic Manager version 9.6 patchlevel 9620140312.
Is CVE-2014-5348 found in any other software versions?
CVE-2014-5348 is specifically associated with Riverbed SteelApp Traffic Manager 9.6 and does not affect other versions.