Back to Database
Status published
Medium
CVE-2014-4693
Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified variables to snort_select_alias.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4693
Credits & Attribution
No credits recorded in the NVD database.
More from netgate
View All →CVE-2022-31814
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary...
Unknown
0
CVE-2022-29273
pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow...
Medium
6.1
CVE-2020-21487
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and...
Unknown
0
CVE-2020-21219
Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3...
Unknown
0
CVE-2020-19203
An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php,...
Medium
5.4
Affected Vendor
netgate
View all reports →Affected Software
pfsense, snort package
Vulnerable Versions:
0, 2.1.3
Timeline
Official Publish:
July 2nd, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.