CVE-2014-4002: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitr...

Security readout for executives and security teams

CVE-2014-4002 is a set of cross-site scripting issues in Cacti 0.8.8b. If an attacker can reach the affected Cacti pages, they may be able to inject script or HTML that runs in a user’s browser. This matters most where Cacti is exposed beyond trusted administrators. Exposure is most likely in environments still running Cacti 0.8.8b or unpatched distribution packages. Risk rises if the Cacti web interface is reachable from untrusted networks or broadly accessible internally. Treat as a cleanup and exposure-reduction priority, not an emergency based on the supplied evidence. Prioritize any internet-accessible Cacti instance or monitoring system used by administrators. Mitigation focus: Upgrade Cacti or distribution packages using vendor advisories.; Check Cacti guidance tied to revisions 7451 and 7452.; Restrict Cacti access to trusted admin networks..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.