1. Home
  2. CVE Database
  3. CVE-2014-5360
MEDIUM · 4.3

CVE-2014-5360

Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter t...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlist_grouptree.aspx.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
LandeskLandesk Management Suite<= 9.6

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2014-5360?

CVE-2014-5360 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter t...

How severe is CVE-2014-5360?

CVE-2014-5360 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-5360?

Check the references section above for vendor advisories and patch information. Affected products include: Landesk Landesk Management Suite.