CVE-2014-0330

2014-02-0623:55:03

CWE-79

certcc

web.nvd.nist.gov

dell kace

k1000 management appliance

xss vulnerability

2014 cve

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

61.1%

JSON

Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABEL_ID parameter.

Affected configurations

Nvd

Node

dellkace_k1000_systems_management_appliance_softwareMatch5.5.90545

AND

dellkace_k1000_systems_management_applianceMatch-

VendorProductVersionCPE
dellkace_k1000_systems_management_appliance_software5.5.90545cpe:2.3:a:dell:kace_k1000_systems_management_appliance_software:5.5.90545:*:*:*:*:*:*:*
dellkace_k1000_systems_management_appliance-cpe:2.3:h:dell:kace_k1000_systems_management_appliance:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	kace_k1000_systems_management_appliance_software	5.5.90545	cpe:2.3:a:dell:kace_k1000_systems_management_appliance_software:5.5.90545:::::::*
dell	kace_k1000_systems_management_appliance	-	cpe:2.3:h:dell:kace_k1000_systems_management_appliance:-:::::::*