Back to Database
Status published
Medium
CVE-2014-5348
Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5348
Credits & Attribution
No credits recorded in the NVD database.
More from riverbed
View All →CVE-2021-43271
Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a,...
Medium
6.8
CVE-2020-15593
SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses...
High
7.8
CVE-2020-15592
SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation...
High
7.5
CVE-2017-7693
Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response...
Medium
6.5
CVE-2017-7307
Riverbed RiOS before 9.0.1 does not properly restrict shell access...
Medium
6.8
Affected Vendor
riverbed
View all reports →Affected Software
steelapp traffic manager
Vulnerable Versions:
9.6
Timeline
Official Publish:
August 19th, 2014
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.