CVE-2014-5348 | BDVDB-2026-63229 Detail

Description#

Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2014/Aug/41
http://www.securityfocus.com/bid/69243

Exploit#

No public exploit known

History#

Version 12014-08-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.