Back to Database
Status published
Medium
CVE-2014-2966
The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not...
Vulnerability Description
The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text restrictions via crafted characters, as demonstrated by bypassing an XSS protection mechanism.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2966
Credits & Attribution
No credits recorded in the NVD database.
More from caucho
View All →CVE-2021-44138
There is a Directory traversal vulnerability in Caucho Resin, as...
High
7.5
CVE-2012-2969
Caucho Quercus, as distributed in Resin before 4.0.29, allows remote...
Medium
6.4
CVE-2012-2968
Directory traversal vulnerability in Caucho Quercus, as distributed in Resin...
Medium
5
CVE-2012-2967
Caucho Quercus, as distributed in Resin before 4.0.29, does not...
High
7.5
CVE-2012-2966
Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries...
High
7.5
Affected Vendor
caucho
View all reports →Affected Software
resin
Vulnerable Versions:
0, 4.0.36, 4.0.37, 4.0.38
Timeline
Official Publish:
July 26th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.