Vulnerability Details CVE-2014-5131
Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
- http://www.securityfocus.com/archive/1/533345/100/0/threaded
- http://www.securityfocus.com/bid/69632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95736
- http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
- http://www.securityfocus.com/archive/1/533345/100/0/threaded
- http://www.securityfocus.com/bid/69632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95736
Products affected by CVE-2014-5131
-
cpe:2.3:a:avolvesoftware:projectdox:8.1