CVE-2014-2353

Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 7.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-05-30

Last modified

2025-10-03

Weaknesses

CWE-79, CWE-80

Affected products

• Datahub (Cogent)
• Cogent Datahub (Cogentdatahub)

References

• http://cogentdatahub.com/Download_Software.html
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
• http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02