Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceSUSE-SU-2018:1743-1

SUSE-SU-2018:1743-1

MEDIUM4.7

Security update for dwr

Published Jun 19, 2018

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for dwr fixes the following issues:

Security issue fixed:

CVE-2014-5326: Fix cross-site scripting (XSS) vulnerability (bsc#1085650).

Affected Packages

dwr

SUSE Manager Server 3.1

Fixed in:

3.0rc2+svn4059-0.12.3.10

References

https://bugzilla.suse.com/1085650

https://www.suse.com/security/cve/CVE-2014-5326/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2018/suse-su-20181743-1.html

https://www.suse.com/support/update/announcement/2018/suse-su-20181743-1/

CVSS Analysis

CVSS v3.0

4.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

ChangedS:C

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

NoneA:N

4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Upstream

Ecosystems

SUSE Manager Server 3.1

Timeline

PublishedJun 19, 2018

ModifiedJun 19, 2018

SUSE-SU-2018:1743-1 | Mondoo Vulnerability Intelligence