GCVE-110-MAGEIA-2014-317 — Vulnetix

GCVE-110-MAGEIA-2014-317

Advisory Published

Vulnetix · Advisory published August 5, 2014

Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (CVE-2014-4722). Also, the web interface has been fixed to work with Apache HTTPD 2.4.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	ocsinventory	0 (affected), 2.0.5-2.2.mga3 (unaffected)	—
Mageia	ocsinventory	0 (affected), 2.0.5-3.2.mga4 (unaffected)	—

Aliases

Transitive aliases

GHSA-qv29-vvm4-3pc6 GSD-2014-4722

References

Updated ocsinventory packages fix security vulnerability

advisory

Updated ocsinventory packages fix security vulnerability

issue

Updated ocsinventory packages fix security vulnerability

issue

Browse GCVE Records

72,096 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›