CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3809

Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.2%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2014-3809

Nokia » 1830 Photonic Service Switch-16 » Version: N/A

cpe:2.3:h:nokia:1830_photonic_service_switch-16:-
Nokia » 1830 Photonic Service Switch-32 » Version: N/A

cpe:2.3:h:nokia:1830_photonic_service_switch-32:-
Nokia » 1830 Photonic Service Switch-4 » Version: N/A

cpe:2.3:h:nokia:1830_photonic_service_switch-4:-
Nokia » 1830 Photonic Service Switch-16 Firmware » Version: N/A

cpe:2.3:o:nokia:1830_photonic_service_switch-16_firmware:-
Nokia » 1830 Photonic Service Switch-16 Firmware » Version: 6.0

cpe:2.3:o:nokia:1830_photonic_service_switch-16_firmware:6.0
Nokia » 1830 Photonic Service Switch-32 Firmware » Version: N/A

cpe:2.3:o:nokia:1830_photonic_service_switch-32_firmware:-
Nokia » 1830 Photonic Service Switch-32 Firmware » Version: 6.0

cpe:2.3:o:nokia:1830_photonic_service_switch-32_firmware:6.0
Nokia » 1830 Photonic Service Switch-4 Firmware » Version: N/A

cpe:2.3:o:nokia:1830_photonic_service_switch-4_firmware:-
Nokia » 1830 Photonic Service Switch-4 Firmware » Version: 6.0

cpe:2.3:o:nokia:1830_photonic_service_switch-4_firmware:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3809

Products

Pricing

Contact Us