Unrated severityNVD Advisory· Published Mar 27, 2014· Updated May 6, 2026
CVE-2014-2326
CVE-2014-2326
Description
Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:cacti:cacti:0.8.7g:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:0.8.7g:*:*:*:*:*:*:*
- (no CPE)range: <=0.8.8b
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- svn.cacti.net/viewvcnvdIssue TrackingPatch
- packetstormsecurity.com/files/125849/Deutsche-Telekom-CERT-Advisory-DTC-A-20140324-001.htmlnvdExploitThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/pipermail/package-announce/2014-April/131821.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlnvdThird Party Advisory
- www.debian.org/security/2014/dsa-2970nvdThird Party Advisory
- www.securityfocus.com/archive/1/531588nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/66390nvdThird Party AdvisoryVDB Entry
- bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingThird Party Advisory
- bugs.cacti.net/view.phpnvdIssue Tracking
- secunia.com/advisories/57647nvd
- secunia.com/advisories/59203nvd
- security.gentoo.org/glsa/201509-03nvd
News mentions
0No linked articles in our index yet.