VDB

GCVE-110-CERTCC-2014-546340

GCVE-110-CERTCC-2014-546340
Advisory PublishedCVSS 4.3/10
Vulnetix · Advisory published January 23, 2015
QPR Portal versions 2014.1.1 and older contain reflected and stored cross-site scripting vulnerabilities, and versions 2012.2.0 and older contain an insecure direct object reference vulnerability.
Download JSON Open in Console

Risk Scores

CVSS 2.0
4.3/10
Medium · AV:N/AC:M/Au:N/C:N/I:P/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score3.4remediation_levelOFreport_confidenceCenvironmental_score2.52290112102target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-8267CVE-2014-8266CVE-2014-8268

Transitive aliases

GHSA-6v7r-4g8j-8pj9GSD-2014-8266GSD-2014-8267GHSA-6q69-fr9m-p8qhCNVD-2015-00693GHSA-mvfw-mv76-2rpcCNVD-2015-00691CNVD-2015-00692GSD-2014-8268

References

QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
url
QPR Portal contains multiple vulnerabilities
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›