Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-6439
HistoryOct 10, 2014 - 1:55 a.m.

Cross site scripting

2014-10-1001:55:00
PRIOn knowledge base
www.prio-n.com
4

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
elasticsearchle1.3.3

6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%