Unrated severityNVD Advisory· Published Nov 20, 2014· Updated Jun 17, 2026
CVE-2014-9026
CVE-2014-9026
Description
The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha1:*:*:*:drupal:*:*+ 19 more
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha1:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha2:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha3:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta1:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta2:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta3:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta4:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc1:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc2:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc3:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc4:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.4:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.5:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.6:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.7:*:*:*:*:drupal:*:*
- cpe:2.3:a:ubercart:ubercart:7.x-3.x-dev:*:*:*:*:drupal:*:*
- Range: <7.x-3.7
Patches
Vulnerability mechanics
References
2- www.drupal.org/node/2336109nvdPatch
- www.drupal.org/node/2336259nvdVendor Advisory
News mentions
0No linked articles in our index yet.