Skip to content
OpenAdvisories
High ICSA-14-149-02 3 CVEs

Cogent DataHub Vulnerabilities

Published Mar 1, 2014 · Updated Jun 9, 2025 · Revision 2

Vendor: Cogent Real-Time Systems Product: DataHub

Vulnerabilities 3

  • High 7.8
    CVE-2014-2352

    Cogent DataHub Path Traversal

    The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable an attacker to access a limited number of hardcoded file types. Further exploitation of this vulnerability may allow an a…

    Cogent DataHub
  • High 7.1
    CVE-2014-2353

    Cogent DataHub XSS

    Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Cogent DataHub
  • Medium 6.0
    CVE-2014-2354

    Cogent DataHub Use of Password Hash With Insufficient Computational Effort

    Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

    Cogent DataHub

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References