CVEvulnerability
CVE-2014-7290
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) Action or (2) Form parameter to aeon.dll.
Affected configurations
• atlas systems aeon 3.5
• atlas systems aeon 3.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/129114/Atlas-Systems-Aeon-3.5-3.6-Cross-Site-Scripting.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Nov/32 seclists.org
- http://tetraph.com/security/xss-vulnerability/cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/ tetraph.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98705 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/129114/Atlas-Systems-Aeon-3.5-3.6-Cross-Site-Scripting.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Nov/32 seclists.org
- http://tetraph.com/security/xss-vulnerability/cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/ tetraph.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98705 exchange.xforce.ibmcloud.com