Unrated severityNVD Advisory· Published Apr 23, 2014· Updated May 6, 2026
CVE-2014-2328
CVE-2014-2328
Description
lib/graph_export.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cacti:cacti:*:*:*:*:*:*:*:*range: >=0.8.7,<=0.8.7g
- (no CPE)range: <=0.8.8b
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- svn.cacti.net/viewvcnvdIssue TrackingPatchVendor Advisory
- bugs.cacti.net/view.phpnvdIssue TrackingVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-April/131821.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-April/131842.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlnvdThird Party Advisory
- secunia.com/advisories/59203nvdThird Party Advisory
- www.debian.org/security/2014/dsa-2970nvdThird Party Advisory
- www.securityfocus.com/archive/1/531588nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/66387nvdThird Party AdvisoryVDB Entry
- bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingThird Party Advisory
- security.gentoo.org/glsa/201509-03nvdThird Party Advisory
News mentions
0No linked articles in our index yet.