Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10614
HistoryOct 14, 2014 - 12:00 a.m.

KLA10614 Code injection vulnerability in Microsoft ASP.NET MVC

2014-10-1400:00:00
Kaspersky Lab
threats.kaspersky.com
69

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.127 Low

EPSS

Percentile

95.5%

JSON

XSS vulnerability was found in ASP.NET MVC. By exploiting this vulnerability malicious users can inject arbitrary script. This vulnerability can be exploited remotely via a specially designed web page.

Original advisories

CVE-2014-4075

Related products

Microsoft-ASP.NET-MVC

CVE list

CVE-2014-4075 warning

KB list

2993937

2990942

2993939

2993928

2994397

2992080

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

  • Microsoft ASP.NET NVC versions 2.0, 3.0, 4.0, 5.0 and 5.1

Related

symantec 1
openvas 1
checkpoint_advisories 3
prion 1
nessus 1
mskb 1
cve 1
nvd 1
cvelist 1
securityvulns 1
symantec
symantec
Microsoft ASP.NET MVC CVE-2014-4075 Cross Site Scripting Vulnerability
2014-10-14 00:00:00
openvas
openvas
ASP.NET MVC Security Feature Bypass Vulnerability (2990942)
2014-10-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft ASP.NET MVC Cross-Site Scripting (MS14-059; CVE-2014-4075)
2014-11-16 00:00:00
Microsoft ASP.NET MVC Cross-Site-Scripting (MS14-059; CVE-2014-4075)
2014-10-14 00:00:00
Cross-Site Scripting (CVE-2005-0543; CVE-2014-4075; CVE-2014-4116; CVE-2014-6325; CVE-2014-6365; CVE-2015-1636; CVE-2015-1640; CVE-2015-1757)
2015-06-09 00:00:00
prion
prion
Cross site scripting
2014-10-15 10:55:00
nessus
nessus
MS14-059: Vulnerability in ASP.NET MVC Could Allow Security Feature Bypass (2990942)
2014-10-15 00:00:00
mskb
mskb
MS14-059: Vulnerability in ASP.NET MVC could allow security feature bypass: October 14, 2014
2014-10-14 00:00:00
cve
cve
CVE-2014-4075
2014-10-15 10:55:07
nvd
nvd
CVE-2014-4075
2014-10-15 10:55:07
cvelist
cvelist
CVE-2014-4075
2014-10-15 10:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2014-10-15 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

High

0.127 Low

EPSS

Percentile

95.5%

JSON
Related for KLA10614
symantec1openvas1checkpoint_advisories3prion1nessus1mskb1cve1nvd1cvelist1securityvulns1