CVE-2014-5360: XSS
Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlistgrouptree.aspx.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5360?
CVE-2014-5360 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2014-5360?
To remediate CVE-2014-5360, upgrade the LANDESK Management Suite to version 9.6 SP1 or later.
What impact does CVE-2014-5360 have on vulnerable systems?
CVE-2014-5360 allows remote attackers to inject arbitrary web scripts or HTML into the admin interface, compromising the security of the affected system.
Who is affected by CVE-2014-5360?
CVE-2014-5360 affects users of the LANDESK Management Suite version 9.6 and earlier.
Can I exploit CVE-2014-5360 for phishing attacks?
Yes, CVE-2014-5360 could be exploited in phishing attacks by injecting malicious scripts into the admin interface.