CVE-2014-2353CWE-80

Cogent DataHub XSS

High · published May 30, 2014

CVSS v2.0
7.1
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The record
Technical detail
CVSS v2.0
7.1 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02466 · 84.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2014-05-30T23:00Z
EPSS history
Timeline
  • 30 MAY 23:00Z
    Cogent DataHub XSS
    cvelistv5