Skip to main content

Cogent Datahub CVE-2014-2353

HIGH
Basic XSS (CWE-80)
2014-05-30 ics-cert@hq.dhs.gov
XSS Cogent Datahub
7.1
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:N/AC:M/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:N/A:N
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
May 30, 2014 - 23:55 cve.org
HIGH 7.1

DescriptionCVE.org

Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AnalysisAI

Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-80. Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected products include: Cogentdatahub Cogent Datahub. Version information: before 7.3.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cogent Datahub

View all
CVE-2014-3789 HIGH POC
7.5 May 22

GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary

CVE-2013-0680 HIGH POC
7.5 Apr 05

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub befor
CVE-2016-2288 HIGH POC
7.8 Mar 29

Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file
CVE-2014-3788 HIGH
7.5 May 22

Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attac
CVE-2014-2352 HIGH
7.8 May 30

The directory specifier can include designators that can be used to traverse the directory path. Rated high severity (CV
CVE-2013-0682 HIGH
7.5 Apr 05

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Window
CVE-2013-0683 HIGH
7.1 Apr 05

The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub befor
CVE-2014-2354 MEDIUM
6.0 May 30

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent att
CVE-2012-0310 MEDIUM
5.8 Jan 13

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.
CVE-2013-0681 MEDIUM
5.0 Apr 05

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Window
CVE-2012-0309 MEDIUM
4.3 Jan 13

Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OP

Same weakness CWE-80 – Basic XSS

View all
CVE-2025-30210 HIGH POC
8.7
CVE-2025-30161 HIGH POC
8.4
CVE-2024-32484 HIGH POC
8.2
CVE-2026-2995 HIGH POC
7.7
CVE-2024-25639 HIGH POC
7.5
CVE-2022-0989 HIGH POC
7.5
CVE-2024-34507 HIGH POC
7.4
CVE-2024-33423 HIGH POC
7.4

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8
CVE-2016-8581 MEDIUM POC
6.1

Share

CVE-2014-2353 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy