CVE-2014-4311

MEDIO 5.0CVE-2014-4311 · Published 04/11/2014 · updated 17/06/2026

En resumen

CVE-2014-4311 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a epicor enterprise (epicor).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.8%, mayor que el 93.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
epicor enterprise epicor	`≤ 7.4`	No fix yet

Description

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mail Connection passwords by reading HTML source code of the database connection and email settings page.

References

packetstormsecurity.com/files/128511/Epicor-Password-Disclosure-Cross-Site-Scripting.html · Exploit
seclists.org/fulldisclosure/2014/Oct/2 · Exploit
exploit-db.com/exploits/34864 · Exploit

Más vulnerabilidades de epicor enterprise

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free