CVE-2014-3110
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 5.3%
from disclosure to weapon1400 days
Published on NVDJul 24
1st PoC+1400d
exploitation probability
5.3%top 8% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44749/unverifiedexploitdbwww.exploit-db.com/exploits/44749unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.