Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2014-3207 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2014-3207

CVE-2014-3207

UNKNOWN

Cross-site scripting (XSS) vulnerability in wserver

Published May 8, 2014

Modified 1 years ago

Details

Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to pks/lookup/undefined1.

References

http://secunia.com/advisories/57965

http://www.securityfocus.com/bid/67198

https://bitbucket.org/skskeyserver/sks-keyserver/commits/88d453cdc858d1352c61a4d4a6cd5b1ac17f2724

https://bitbucket.org/skskeyserver/sks-keyserver/issue/26/unfiltered-xss

https://bugzilla.mozilla.org/show_bug.cgi?id=952077

https://www.cve.org/CVERecord?id=CVE-2014-3207

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedMay 8, 2014

ModifiedAug 6, 2024