CVE-2014-5137: Iii Sierra

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of login requests, possibly related to the Webpac Pro submodule.

Affected products

• Iii Sierra: version 1.2_3 only

Published 2014-09-02. Last modified 2026-06-17.