CVE-2014-4693 — MEDIUM (4.3)

Q: How severe is CVE-2014-4693?

CVE-2014-4693 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-4693?

Check the references section above for vendor advisories and patch information. Affected products include: Netgate Pfsense, Pfsense Snort Package.

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified variables to snort_select_alias.php.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Netgate	Pfsense	<= 2.1.4
Pfsense	Snort Package	<= 3.0.12

Related Weaknesses (CWE)

CWE-79

References

https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.ascVendor Advisory
https://pfsense.org/security/advisories/pfSense-SA-14_13.packages.ascVendor Advisory

FAQ

What is CVE-2014-4693?

CVE-2014-4693 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter...

How severe is CVE-2014-4693?

CVE-2014-4693 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-4693?

Check the references section above for vendor advisories and patch information. Affected products include: Netgate Pfsense, Pfsense Snort Package.