What is CVE-2014-4919?

CVE-2014-4919 is a medium-severity vulnerability in Oxid-esales Eshop, classified under CWE-264. CVSS score: 5.4/10. Published 2018-01-19.

How severe is CVE-2014-4919?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Vulnerability in Oxid-esales Eshop

CVE-2014-4919

OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7.13 and 4.8.x before 4.8.7 allow remote attackers to assign users to arbitrary d…

EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L.

Affected products

Oxid-esales Eshop
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2014-4919?: CVE-2014-4919 is a medium-severity vulnerability in Oxid-esales Eshop, classified under CWE-264. CVSS score: 5.4/10. Published 2018-01-19.
How severe is CVE-2014-4919?: Medium severity. CVSS v3 base score is 5.4 out of 10.