CVE-2014-5348
NONE
Published Aug 19, 201411y ago · Modified Jun 17, 20262w ago
Published Aug 19, 2014 11y ago
Last Modified Jun 17, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| riverbed | steelapp_traffic_manager | 9.6 | any |
References 2
- seclists.org http://seclists.org/fulldisclosure/2014/Aug/41
- securityfocus.com http://www.securityfocus.com/bid/69243
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.