Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-2326

Fixed in a distro release EPSS 3%

Cross-site scripting (XSS) vulnerability in cdef.php in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published 2014-03-27 · CVE record · OSV

Products: fedoraproject fedora, opensuse, cacti, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12cacti0.8.8b+dfsg-4
Debian 13cacti0.8.8b+dfsg-4
Debian 14cacti0.8.8b+dfsg-4
Debian 7cacti0.8.8a+dfsg-5+deb7u3
openSUSE Tumbleweedcacti0.8.8h-1.2