High severity7.5NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026

CVE-2014-5138

Description

Innovative Interfaces Sierra Library Services Platform 1.2_3 does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass parameter validation via unspecified vectors, possibly related to the Webpac Pro submodule.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Iii/Sierra
cpe:2.3:a:iii:sierra:1.2_3:*:*:*:*:*:*:*
Innovative Interfaces/Sierra Library Services Platformdescription
Innovative Interfaces/Sierra Library Services Platformllm-fuzzy
Range: = 1.2_3

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/128053/Sierra-Library-Services-Platform-1.2_3-XSS-Enumeration.htmlnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000