CVE-2014-8629: XSS
Published Nov 19, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php.
Affected Software
1 affected component
PandoraFMS Pandora Flexible Monitoring System<=5.1
Remediation
Patch Available
Event History
Nov 19, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8629?
CVE-2014-8629 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-8629?
To fix CVE-2014-8629, upgrade Pandora FMS to version 5.1 SP2 or later.
3
What kind of attacks can occur due to CVE-2014-8629?
CVE-2014-8629 allows attackers to perform cross-site scripting attacks by injecting malicious scripts through the refr parameter.
4
Which versions of Pandora FMS are affected by CVE-2014-8629?
Pandora FMS versions up to and including 5.1 SP1 are affected by CVE-2014-8629.
5
Is CVE-2014-8629 a client-side or server-side vulnerability?
CVE-2014-8629 is primarily a client-side vulnerability, as it affects the way web browsers execute scripts from the affected server.