CVE-2014-5360 in Management Suite
Summary
Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlist_grouptree.aspx.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
08/19/2014
Disclosure
02/03/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73836 | LANDESK Management Suite Admin cross site scripting | 79 | Proof-of-Concept | Official fix | CVE-2014-5360 |