CVE-2014-5348: Riverbed Steelapp Traffic Manager

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.

Affected products

• Riverbed Steelapp Traffic Manager: version 9.6 only

Published 2014-08-19. Last modified 2026-06-17.