Unrated severityNVD Advisory· Published Oct 20, 2014· Updated May 6, 2026
CVE-2014-5025
CVE-2014-5025
Description
Cross-site scripting (XSS) vulnerability in data_sources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrary web script or HTML via the name_cache parameter in a ds_edit action.
Affected products
4- cpe:2.3:a:cacti:cacti:0.8.8b:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- bugs.cacti.net/view.phpnvdExploitIssue TrackingPatchVendor Advisory
- www.openwall.com/lists/oss-security/2014/07/22/9nvdExploitMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-03/msg00034.htmlnvdThird Party Advisory
- www.debian.org/security/2014/dsa-3007nvdThird Party Advisory
- www.securityfocus.com/bid/68759nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/94814nvd
- security.gentoo.org/glsa/201509-03nvd
News mentions
0No linked articles in our index yet.