{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T17:13:02.475","vulnerabilities":[{"cve":{"id":"CVE-2014-3650","sourceIdentifier":"secalert@redhat.com","published":"2022-07-01T14:15:08.160","lastModified":"2026-06-17T00:08:41.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input."},{"lang":"es","value":"Se encontraron múltiples fallos persistentes de tipo cross-site scripting (XSS) en la forma en que Aerogear manejaba determinado contenido suministrado por el usuario. Un atacante remoto podría usar estos fallos para comprometer la aplicación con entradas especialmente diseñadas"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"Jboss Aerogear","versions":[{"version":"Jboss Aerogear 1.0.0.final","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_aerogear:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8241631C-9E1A-4612-82F5-92BDFFB73167"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144212","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://issues.redhat.com/browse/AEROGEAR-5978","source":"secalert@redhat.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://issues.redhat.com/browse/AEROGEAR-5978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]}]}}]}