Lucene search
HistoryJul 22, 2014 - 2:55 p.m.
CVE-2014-5021
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
30.3%
Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the “administer taxonomy” permission to inject arbitrary web script or HTML via an option group label.
Affected configurations
Node
drupaldrupalMatch7.0
ORdrupaldrupalMatch7.0alpha1
ORdrupaldrupalMatch7.0alpha2
ORdrupaldrupalMatch7.0alpha3
ORdrupaldrupalMatch7.0alpha4
ORdrupaldrupalMatch7.0alpha5
ORdrupaldrupalMatch7.0alpha6
ORdrupaldrupalMatch7.0alpha7
ORdrupaldrupalMatch7.0beta1
ORdrupaldrupalMatch7.0beta2
ORdrupaldrupalMatch7.0beta3
ORdrupaldrupalMatch7.0dev
ORdrupaldrupalMatch7.0rc1
ORdrupaldrupalMatch7.0rc2
ORdrupaldrupalMatch7.0rc3
ORdrupaldrupalMatch7.0rc4
ORdrupaldrupalMatch7.1
ORdrupaldrupalMatch7.2
ORdrupaldrupalMatch7.3
ORdrupaldrupalMatch7.4
ORdrupaldrupalMatch7.5
ORdrupaldrupalMatch7.6
ORdrupaldrupalMatch7.7
ORdrupaldrupalMatch7.8
ORdrupaldrupalMatch7.9
ORdrupaldrupalMatch7.10
ORdrupaldrupalMatch7.11
ORdrupaldrupalMatch7.12
ORdrupaldrupalMatch7.13
ORdrupaldrupalMatch7.14
ORdrupaldrupalMatch7.15
ORdrupaldrupalMatch7.16
ORdrupaldrupalMatch7.17
ORdrupaldrupalMatch7.18
ORdrupaldrupalMatch7.19
ORdrupaldrupalMatch7.20
ORdrupaldrupalMatch7.21
ORdrupaldrupalMatch7.22
ORdrupaldrupalMatch7.23
ORdrupaldrupalMatch7.24
ORdrupaldrupalMatch7.25
ORdrupaldrupalMatch7.26
ORdrupaldrupalMatch7.27
ORdrupaldrupalMatch7.28
ORdrupaldrupalMatch7.x-dev
Node
drupaldrupalMatch6.0
ORdrupaldrupalMatch6.0beta1
ORdrupaldrupalMatch6.0beta2
ORdrupaldrupalMatch6.0beta3
ORdrupaldrupalMatch6.0beta4
ORdrupaldrupalMatch6.0dev
ORdrupaldrupalMatch6.0rc1
ORdrupaldrupalMatch6.0rc2
ORdrupaldrupalMatch6.0rc3
ORdrupaldrupalMatch6.0rc4
ORdrupaldrupalMatch6.1
ORdrupaldrupalMatch6.2
ORdrupaldrupalMatch6.3
ORdrupaldrupalMatch6.4
ORdrupaldrupalMatch6.5
ORdrupaldrupalMatch6.6
ORdrupaldrupalMatch6.7
ORdrupaldrupalMatch6.8
ORdrupaldrupalMatch6.9
ORdrupaldrupalMatch6.10
ORdrupaldrupalMatch6.11
ORdrupaldrupalMatch6.12
ORdrupaldrupalMatch6.13
ORdrupaldrupalMatch6.14
ORdrupaldrupalMatch6.15
ORdrupaldrupalMatch6.16
ORdrupaldrupalMatch6.17
ORdrupaldrupalMatch6.18
ORdrupaldrupalMatch6.19
ORdrupaldrupalMatch6.20
ORdrupaldrupalMatch6.21
ORdrupaldrupalMatch6.22
ORdrupaldrupalMatch6.23
ORdrupaldrupalMatch6.24
ORdrupaldrupalMatch6.25
ORdrupaldrupalMatch6.26
ORdrupaldrupalMatch6.27
ORdrupaldrupalMatch6.28
ORdrupaldrupalMatch6.29
ORdrupaldrupalMatch6.30
ORdrupaldrupalMatch6.31
Related
debiancve
debiancve
CVE-2014-5021
2014-07-22 14:55:00
prion
prion
Cross site scripting
2014-07-22 14:55:00
cvelist
cvelist
CVE-2014-5021
2022-10-03 16:20:42
cve
cve
CVE-2014-5021
2022-10-03 16:20:42
ubuntucve
ubuntucve
CVE-2014-5021
2014-07-22 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
openvas
openvas
Debian Security Advisory DSA 2983-1 (drupal7 - security update)
2014-07-20 00:00:00
Debian: Security Advisory (DSA-2983-1)
2014-07-19 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
nessus
nessus
Drupal 6.x < 6.32 / 7.x < 7.29 Multiple Vulnerabilities
2014-07-21 00:00:00
Fedora 19 : drupal7-7.29-1.fc19 (2014-8515)
2014-07-29 00:00:00
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
30.3%
Related for NVD:CVE-2014-5021