CVE-2014-0362

Currently unrated

Key Information:

Vendor
Google
Status
Search Appliance Software
Vendor
CVE Published:
8 May 2014

Summary

Cross-site scripting (XSS) vulnerability on Google Search Appliance (GSA) devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element.

References

http://www.securityfocus.com/bid/67176
vdb-entryx_refsource_BID
http://www.kb.cert.org/vuls/id/673313
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.