Back to Database
Status published
Medium
CVE-2014-4919
OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7,...
Vulnerability Description
OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7.13 and 4.8.x before 4.8.7 allow remote attackers to assign users to arbitrary dynamical user groups.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4919
Credits & Attribution
No credits recorded in the NVD database.
References
More from oxid-esales
View All →CVE-2019-17062
An issue was discovered in OXID eShop 6.x before 6.0.6...
High
8.8
CVE-2019-13026
OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows...
Critical
9.8
CVE-2018-5763
An issue was discovered in OXID eShop Enterprise Edition before...
Medium
5.9
CVE-2018-20715
The DB abstraction layer of OXID eSales 4.10.6 is vulnerable...
Critical
9.8
CVE-2018-12579
An issue was discovered in OXID eShop Enterprise Edition before...
High
8.1
Affected Vendor
oxid-esales
View all reports →Affected Software
eshop
Vulnerable Versions:
0, 4.8.0, 5.1.0
Timeline
Official Publish:
January 19th, 2018
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.