CVE-2017-14850 - CVE House
Back to Database
Status published Unknown CVE-2017-14850

All known versions of the Orpak SiteOmat web management console...

Vulnerability Description

All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-14850

Credits & Attribution

No credits recorded in the NVD database.

References

More from orpak

View All →
CVE-2017-14854
A stack buffer overflow exists in one of the Orpak...
Unknown 0
CVE-2017-14853
The Orpak SiteOmat OrCU component is vulnerable to code injection,...
Unknown 0
CVE-2017-14852
An insecure communication was found between a user and the...
Unknown 0
CVE-2017-14851
A SQL injection vulnerability exists in all Orpak SiteOmat versions...
Unknown 0
CVE-2017-14728
An authentication bypass was found in an unknown area of...
Unknown 0

Affected Vendor

Affected Software

siteomat
Vulnerable Versions:
0

Timeline

Official Publish: June 3rd, 2019
Last Modified: June 2nd, 2026
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.