CVE-2014-2843

  • Last update: Apr 13, 2023

Description

Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Software From Fixed in
infoware / mapsuite 1.0 1.0.36
infoware / mapsuite 1.1.0 1.1.49

Details

    • Severity: Medium
  • CVE: CVE-2014-2843
  • Published: Jan 31, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs

OWASP TOP 10