CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5468

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.653

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2014-5468

Getrailo » Railo » Version: N/A

cpe:2.3:a:getrailo:railo:-
Getrailo » Railo » Version: 3.1.2.016

cpe:2.3:a:getrailo:railo:3.1.2.016
Getrailo » Railo » Version: 3.1.2.017

cpe:2.3:a:getrailo:railo:3.1.2.017
Getrailo » Railo » Version: 3.1.2.018

cpe:2.3:a:getrailo:railo:3.1.2.018
Getrailo » Railo » Version: 3.1.2.019

cpe:2.3:a:getrailo:railo:3.1.2.019
Getrailo » Railo » Version: 3.1.2.020

cpe:2.3:a:getrailo:railo:3.1.2.020
Getrailo » Railo » Version: 3.2.0.000

cpe:2.3:a:getrailo:railo:3.2.0.000
Getrailo » Railo » Version: 3.2.0.001

cpe:2.3:a:getrailo:railo:3.2.0.001
Getrailo » Railo » Version: 3.2.0.002

cpe:2.3:a:getrailo:railo:3.2.0.002
Getrailo » Railo » Version: 3.2.0.003

cpe:2.3:a:getrailo:railo:3.2.0.003
Getrailo » Railo » Version: 3.2.0.004

cpe:2.3:a:getrailo:railo:3.2.0.004
Getrailo » Railo » Version: 3.2.0.005

cpe:2.3:a:getrailo:railo:3.2.0.005
Getrailo » Railo » Version: 3.2.0.006

cpe:2.3:a:getrailo:railo:3.2.0.006
Getrailo » Railo » Version: 3.2.1.000

cpe:2.3:a:getrailo:railo:3.2.1.000
Getrailo » Railo » Version: 3.2.1.001

cpe:2.3:a:getrailo:railo:3.2.1.001
Getrailo » Railo » Version: 3.2.1.002

cpe:2.3:a:getrailo:railo:3.2.1.002
Getrailo » Railo » Version: 3.2.1.003

cpe:2.3:a:getrailo:railo:3.2.1.003
Getrailo » Railo » Version: 3.2.1.004

cpe:2.3:a:getrailo:railo:3.2.1.004
Getrailo » Railo » Version: 3.2.1.005

cpe:2.3:a:getrailo:railo:3.2.1.005
Getrailo » Railo » Version: 3.2.1.006

cpe:2.3:a:getrailo:railo:3.2.1.006
Getrailo » Railo » Version: 3.2.2.000

cpe:2.3:a:getrailo:railo:3.2.2.000
Getrailo » Railo » Version: 3.2.2.001

cpe:2.3:a:getrailo:railo:3.2.2.001
Getrailo » Railo » Version: 3.2.2.002

cpe:2.3:a:getrailo:railo:3.2.2.002
Getrailo » Railo » Version: 3.2.2.003

cpe:2.3:a:getrailo:railo:3.2.2.003
Getrailo » Railo » Version: 3.2.2.004

cpe:2.3:a:getrailo:railo:3.2.2.004
Getrailo » Railo » Version: 3.2.2.005

cpe:2.3:a:getrailo:railo:3.2.2.005
Getrailo » Railo » Version: 3.2.3.000

cpe:2.3:a:getrailo:railo:3.2.3.000
Getrailo » Railo » Version: 3.2.3.001

cpe:2.3:a:getrailo:railo:3.2.3.001
Getrailo » Railo » Version: 3.3.0.000

cpe:2.3:a:getrailo:railo:3.3.0.000
Getrailo » Railo » Version: 3.3.0.001

cpe:2.3:a:getrailo:railo:3.3.0.001
Getrailo » Railo » Version: 3.3.0.002

cpe:2.3:a:getrailo:railo:3.3.0.002
Getrailo » Railo » Version: 3.3.0.003

cpe:2.3:a:getrailo:railo:3.3.0.003
Getrailo » Railo » Version: 3.3.0.004

cpe:2.3:a:getrailo:railo:3.3.0.004
Getrailo » Railo » Version: 3.3.0.005

cpe:2.3:a:getrailo:railo:3.3.0.005
Getrailo » Railo » Version: 3.3.0.006

cpe:2.3:a:getrailo:railo:3.3.0.006
Getrailo » Railo » Version: 3.3.0.007

cpe:2.3:a:getrailo:railo:3.3.0.007
Getrailo » Railo » Version: 3.3.0.008

cpe:2.3:a:getrailo:railo:3.3.0.008
Getrailo » Railo » Version: 3.3.0.009

cpe:2.3:a:getrailo:railo:3.3.0.009
Getrailo » Railo » Version: 3.3.0.010

cpe:2.3:a:getrailo:railo:3.3.0.010
Getrailo » Railo » Version: 3.3.0.011

cpe:2.3:a:getrailo:railo:3.3.0.011
Getrailo » Railo » Version: 3.3.0.012

cpe:2.3:a:getrailo:railo:3.3.0.012
Getrailo » Railo » Version: 3.3.0.013

cpe:2.3:a:getrailo:railo:3.3.0.013
Getrailo » Railo » Version: 3.3.0.014

cpe:2.3:a:getrailo:railo:3.3.0.014
Getrailo » Railo » Version: 3.3.0.015

cpe:2.3:a:getrailo:railo:3.3.0.015
Getrailo » Railo » Version: 3.3.0.016

cpe:2.3:a:getrailo:railo:3.3.0.016
Getrailo » Railo » Version: 3.3.0.017

cpe:2.3:a:getrailo:railo:3.3.0.017
Getrailo » Railo » Version: 3.3.0.018

cpe:2.3:a:getrailo:railo:3.3.0.018
Getrailo » Railo » Version: 3.3.0.019

cpe:2.3:a:getrailo:railo:3.3.0.019
Getrailo » Railo » Version: 3.3.0.020

cpe:2.3:a:getrailo:railo:3.3.0.020
Getrailo » Railo » Version: 3.3.0.021

cpe:2.3:a:getrailo:railo:3.3.0.021
Getrailo » Railo » Version: 3.3.0.022

cpe:2.3:a:getrailo:railo:3.3.0.022
Getrailo » Railo » Version: 3.3.0.023

cpe:2.3:a:getrailo:railo:3.3.0.023
Getrailo » Railo » Version: 3.3.0.026

cpe:2.3:a:getrailo:railo:3.3.0.026
Getrailo » Railo » Version: 3.3.0.027

cpe:2.3:a:getrailo:railo:3.3.0.027
Getrailo » Railo » Version: 3.3.0.028

cpe:2.3:a:getrailo:railo:3.3.0.028
Getrailo » Railo » Version: 3.3.0.029

cpe:2.3:a:getrailo:railo:3.3.0.029
Getrailo » Railo » Version: 3.3.1.000

cpe:2.3:a:getrailo:railo:3.3.1.000
Getrailo » Railo » Version: 3.3.1.001

cpe:2.3:a:getrailo:railo:3.3.1.001
Getrailo » Railo » Version: 3.3.1.002

cpe:2.3:a:getrailo:railo:3.3.1.002
Getrailo » Railo » Version: 3.3.1.003

cpe:2.3:a:getrailo:railo:3.3.1.003
Getrailo » Railo » Version: 3.3.1.005

cpe:2.3:a:getrailo:railo:3.3.1.005
Getrailo » Railo » Version: 3.3.1.006

cpe:2.3:a:getrailo:railo:3.3.1.006
Getrailo » Railo » Version: 3.3.1.007

cpe:2.3:a:getrailo:railo:3.3.1.007
Getrailo » Railo » Version: 3.3.1.008

cpe:2.3:a:getrailo:railo:3.3.1.008
Getrailo » Railo » Version: 3.3.1.010

cpe:2.3:a:getrailo:railo:3.3.1.010
Getrailo » Railo » Version: 3.3.2.000

cpe:2.3:a:getrailo:railo:3.3.2.000
Getrailo » Railo » Version: 3.3.2.001

cpe:2.3:a:getrailo:railo:3.3.2.001
Getrailo » Railo » Version: 3.3.2.002

cpe:2.3:a:getrailo:railo:3.3.2.002
Getrailo » Railo » Version: 3.3.2.003

cpe:2.3:a:getrailo:railo:3.3.2.003
Getrailo » Railo » Version: 3.3.2.005

cpe:2.3:a:getrailo:railo:3.3.2.005
Getrailo » Railo » Version: 3.3.2.008

cpe:2.3:a:getrailo:railo:3.3.2.008
Getrailo » Railo » Version: 3.3.2.009

cpe:2.3:a:getrailo:railo:3.3.2.009
Getrailo » Railo » Version: 3.3.3.000

cpe:2.3:a:getrailo:railo:3.3.3.000
Getrailo » Railo » Version: 3.3.3.001

cpe:2.3:a:getrailo:railo:3.3.3.001
Getrailo » Railo » Version: 3.3.4.000

cpe:2.3:a:getrailo:railo:3.3.4.000
Getrailo » Railo » Version: 3.3.4.001

cpe:2.3:a:getrailo:railo:3.3.4.001
Getrailo » Railo » Version: 3.3.4.002

cpe:2.3:a:getrailo:railo:3.3.4.002
Getrailo » Railo » Version: 3.3.4.003

cpe:2.3:a:getrailo:railo:3.3.4.003
Getrailo » Railo » Version: 3.3.5.001

cpe:2.3:a:getrailo:railo:3.3.5.001
Getrailo » Railo » Version: 3.3.5.002

cpe:2.3:a:getrailo:railo:3.3.5.002
Getrailo » Railo » Version: 3.3.5.003

cpe:2.3:a:getrailo:railo:3.3.5.003
Getrailo » Railo » Version: 3.3.5.004

cpe:2.3:a:getrailo:railo:3.3.5.004
Getrailo » Railo » Version: 3.3.5.005

cpe:2.3:a:getrailo:railo:3.3.5.005
Getrailo » Railo » Version: 4.0.0.001

cpe:2.3:a:getrailo:railo:4.0.0.001
Getrailo » Railo » Version: 4.0.0.002

cpe:2.3:a:getrailo:railo:4.0.0.002
Getrailo » Railo » Version: 4.0.0.003

cpe:2.3:a:getrailo:railo:4.0.0.003
Getrailo » Railo » Version: 4.0.0.004

cpe:2.3:a:getrailo:railo:4.0.0.004
Getrailo » Railo » Version: 4.0.0.005

cpe:2.3:a:getrailo:railo:4.0.0.005
Getrailo » Railo » Version: 4.0.0.006

cpe:2.3:a:getrailo:railo:4.0.0.006
Getrailo » Railo » Version: 4.0.0.007

cpe:2.3:a:getrailo:railo:4.0.0.007
Getrailo » Railo » Version: 4.0.0.008

cpe:2.3:a:getrailo:railo:4.0.0.008
Getrailo » Railo » Version: 4.0.0.009

cpe:2.3:a:getrailo:railo:4.0.0.009
Getrailo » Railo » Version: 4.0.0.010

cpe:2.3:a:getrailo:railo:4.0.0.010
Getrailo » Railo » Version: 4.0.0.011

cpe:2.3:a:getrailo:railo:4.0.0.011
Getrailo » Railo » Version: 4.0.0.012

cpe:2.3:a:getrailo:railo:4.0.0.012
Getrailo » Railo » Version: 4.0.0.013

cpe:2.3:a:getrailo:railo:4.0.0.013
Getrailo » Railo » Version: 4.0.1.000

cpe:2.3:a:getrailo:railo:4.0.1.000
Getrailo » Railo » Version: 4.0.1.001

cpe:2.3:a:getrailo:railo:4.0.1.001
Getrailo » Railo » Version: 4.0.1.002

cpe:2.3:a:getrailo:railo:4.0.1.002
Getrailo » Railo » Version: 4.0.1.005

cpe:2.3:a:getrailo:railo:4.0.1.005
Getrailo » Railo » Version: 4.0.1.006

cpe:2.3:a:getrailo:railo:4.0.1.006
Getrailo » Railo » Version: 4.0.2.000

cpe:2.3:a:getrailo:railo:4.0.2.000
Getrailo » Railo » Version: 4.0.3.000

cpe:2.3:a:getrailo:railo:4.0.3.000
Getrailo » Railo » Version: 4.0.3.001

cpe:2.3:a:getrailo:railo:4.0.3.001
Getrailo » Railo » Version: 4.0.3.002

cpe:2.3:a:getrailo:railo:4.0.3.002
Getrailo » Railo » Version: 4.0.3.003

cpe:2.3:a:getrailo:railo:4.0.3.003
Getrailo » Railo » Version: 4.0.4.000

cpe:2.3:a:getrailo:railo:4.0.4.000
Getrailo » Railo » Version: 4.0.4.001

cpe:2.3:a:getrailo:railo:4.0.4.001
Getrailo » Railo » Version: 4.0.5.000

cpe:2.3:a:getrailo:railo:4.0.5.000
Getrailo » Railo » Version: 4.0.5.001

cpe:2.3:a:getrailo:railo:4.0.5.001
Getrailo » Railo » Version: 4.0.5.002

cpe:2.3:a:getrailo:railo:4.0.5.002
Getrailo » Railo » Version: 4.0.5.004

cpe:2.3:a:getrailo:railo:4.0.5.004
Getrailo » Railo » Version: 4.0.5.005

cpe:2.3:a:getrailo:railo:4.0.5.005
Getrailo » Railo » Version: 4.1.0.000

cpe:2.3:a:getrailo:railo:4.1.0.000
Getrailo » Railo » Version: 4.1.0.001

cpe:2.3:a:getrailo:railo:4.1.0.001
Getrailo » Railo » Version: 4.1.0.002

cpe:2.3:a:getrailo:railo:4.1.0.002
Getrailo » Railo » Version: 4.1.0.003

cpe:2.3:a:getrailo:railo:4.1.0.003
Getrailo » Railo » Version: 4.1.0.004

cpe:2.3:a:getrailo:railo:4.1.0.004
Getrailo » Railo » Version: 4.1.0.006

cpe:2.3:a:getrailo:railo:4.1.0.006
Getrailo » Railo » Version: 4.1.0.008

cpe:2.3:a:getrailo:railo:4.1.0.008
Getrailo » Railo » Version: 4.1.0.011

cpe:2.3:a:getrailo:railo:4.1.0.011
Getrailo » Railo » Version: 4.1.1.002

cpe:2.3:a:getrailo:railo:4.1.1.002
Getrailo » Railo » Version: 4.1.1.005

cpe:2.3:a:getrailo:railo:4.1.1.005
Getrailo » Railo » Version: 4.1.1.007

cpe:2.3:a:getrailo:railo:4.1.1.007
Getrailo » Railo » Version: 4.1.1.008

cpe:2.3:a:getrailo:railo:4.1.1.008
Getrailo » Railo » Version: 4.1.1.009

cpe:2.3:a:getrailo:railo:4.1.1.009
Getrailo » Railo » Version: 4.1.2.000

cpe:2.3:a:getrailo:railo:4.1.2.000
Getrailo » Railo » Version: 4.1.2.002

cpe:2.3:a:getrailo:railo:4.1.2.002
Getrailo » Railo » Version: 4.1.2.003

cpe:2.3:a:getrailo:railo:4.1.2.003
Getrailo » Railo » Version: 4.1.2.004

cpe:2.3:a:getrailo:railo:4.1.2.004
Getrailo » Railo » Version: 4.1.2.005

cpe:2.3:a:getrailo:railo:4.1.2.005
Getrailo » Railo » Version: 4.1.2.006

cpe:2.3:a:getrailo:railo:4.1.2.006
Getrailo » Railo » Version: 4.1.3.000

cpe:2.3:a:getrailo:railo:4.1.3.000
Getrailo » Railo » Version: 4.1.3.001

cpe:2.3:a:getrailo:railo:4.1.3.001
Getrailo » Railo » Version: 4.1.3.002

cpe:2.3:a:getrailo:railo:4.1.3.002
Getrailo » Railo » Version: 4.1.3.003

cpe:2.3:a:getrailo:railo:4.1.3.003
Getrailo » Railo » Version: 4.1.3.004

cpe:2.3:a:getrailo:railo:4.1.3.004
Getrailo » Railo » Version: 4.1.3.005

cpe:2.3:a:getrailo:railo:4.1.3.005
Getrailo » Railo » Version: 4.1.3.006

cpe:2.3:a:getrailo:railo:4.1.3.006
Getrailo » Railo » Version: 4.2.0.000

cpe:2.3:a:getrailo:railo:4.2.0.000
Getrailo » Railo » Version: 4.2.0.001

cpe:2.3:a:getrailo:railo:4.2.0.001
Getrailo » Railo » Version: 4.2.0.002

cpe:2.3:a:getrailo:railo:4.2.0.002
Getrailo » Railo » Version: 4.2.0.003

cpe:2.3:a:getrailo:railo:4.2.0.003
Getrailo » Railo » Version: 4.2.0.004

cpe:2.3:a:getrailo:railo:4.2.0.004
Getrailo » Railo » Version: 4.2.0.005

cpe:2.3:a:getrailo:railo:4.2.0.005
Getrailo » Railo » Version: 4.2.0.006

cpe:2.3:a:getrailo:railo:4.2.0.006
Getrailo » Railo » Version: 4.2.0.007

cpe:2.3:a:getrailo:railo:4.2.0.007
Getrailo » Railo » Version: 4.2.0.008

cpe:2.3:a:getrailo:railo:4.2.0.008
Getrailo » Railo » Version: 4.2.0.009

cpe:2.3:a:getrailo:railo:4.2.0.009
Getrailo » Railo » Version: 4.2.1.000

cpe:2.3:a:getrailo:railo:4.2.1.000

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5468

Products

Pricing

Contact Us