Unrated severityNVD Advisory· Published Mar 11, 2015· Updated May 6, 2026
CVE-2014-9017
CVE-2014-9017
Description
Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 (build 23338) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to frontend/index.jsp.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- youtu.be/3jBQFAAq23knvdExploitThird Party Advisory
- packetstormsecurity.com/files/130723/OpenKM-Stored-Cross-Site-Scripting.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2015/Mar/48nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2015/Mar/51nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.