{"api_version":"1","generated_at":"2026-07-23T11:35:33+00:00","cve":"CVE-2008-0914","urls":{"html":"https://cve.report/CVE-2008-0914","api":"https://cve.report/api/cve/CVE-2008-0914.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0914","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0914"},"summary":{"title":"CVE-2008-0914","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-02-22 23:44:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/28963","name":"http://secunia.com/advisories/28963","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IPdiva SSL VPN Server Weakness and Cross-Site Scripting Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[Full-disclosure] DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS\tattacks","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3690","name":"http://securityreason.com/securityalert/3690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IP Diva VPN SSL many XSS attacks - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/27800","name":"http://www.securityfocus.com/bid/27800","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IPdiva SSL VPN Security Bypass Vulnerability and Multiple Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded","name":"http://www.securityfocus.com/archive/1/488204/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded","name":"http://www.securityfocus.com/archive/1/488143/100/100/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0914","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0914","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"914","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ipdiva","cpe5":"ipdiva","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"914","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ipdiva","cpe5":"ipdiva","cpe6":"2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T08:01:40.068Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20080214 Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded"},{"name":"28963","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28963"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded"},{"name":"ipdivaserver-unspecified-xss(40545)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545"},{"name":"27800","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/27800"},{"name":"3690","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3690"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-02-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20080214 Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded"},{"name":"28963","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28963"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded"},{"name":"ipdivaserver-unspecified-xss(40545)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545"},{"name":"27800","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/27800"},{"name":"3690","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3690"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-0914","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20080214 Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/488204/100/0/threaded"},{"name":"28963","refsource":"SECUNIA","url":"http://secunia.com/advisories/28963"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/488143/100/100/threaded"},{"name":"ipdivaserver-unspecified-xss(40545)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40545"},{"name":"27800","refsource":"BID","url":"http://www.securityfocus.com/bid/27800"},{"name":"3690","refsource":"SREASON","url":"http://securityreason.com/securityalert/3690"},{"name":"20080214 DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-0914","datePublished":"2008-02-22T23:00:00.000Z","dateReserved":"2008-02-22T00:00:00.000Z","dateUpdated":"2024-08-07T08:01:40.068Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-02-22 23:44:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8FD0D7B1-A897-4655-BF4F-5A7C5F0D340A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipdiva:ipdiva:2.3:*:*:*:*:*:*:*","matchCriteriaId":"0540F193-E67F-4622-B37B-407893F1EFEC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"914","Ordinal":"1","Title":"CVE-2008-0914","CVE":"CVE-2008-0914","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"914","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2008-0914"},{"CveYear":"2008","CveId":"914","Ordinal":"2","NoteData":"2008-02-22","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"914","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}