[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIt8u6Cn_ZitXkZq9Xp6UWdX3JuTGURprIFEjz4tDqh0":3,"g5a-risk:CVE-2014-9304":105},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":60,"weaknesses":61,"weaknessesCount":38,"isActivelyExploited":65,"cisaInfo":15,"otxData":15,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":101,"notableEvents":102},"CVE-2014-9304","What is CVE-2014-9304?","Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system\u002Fproxy, which are inconsistently processed by the request handler in the backend web server.","Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actio...","2014-12-07T21:59:05.757","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.08109,[29,29,29,29,29,29,29],"High",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"plex","media_server","*","cpe:2.3:a:plex:media_server:*:*:*:*:*:*:*:*",1,[40,45,50,54,56,58],{"url":41,"source":42,"tags":43},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F531290","Securityfocus",[44],"Exploit",{"url":46,"source":47,"tags":48},"https:\u002F\u002Fforums.plex.tv\u002Findex.php\u002Ftopic\u002F62832-plex-media-server\u002F?p=583250","Plex",[49],"Vendor Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.sec-consult.com\u002Ffxdata\u002Fseccons\u002Fprod\u002Ftemedia\u002Fadvisories_txt\u002F20140228-1_Plex_Media_Server_Authentication_bypass_local_file_disclosure_v10.txt","Sec-consult",[44],{"url":41,"source":42,"tags":55},[44],{"url":46,"source":47,"tags":57},[49],{"url":51,"source":52,"tags":59},[44],6,[62],{"id":63,"name":63,"description":64},"Unknown","CWE-264",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2014-9304? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-9304, a high severity cyber security vulnerability from 2014. Plex Media Server before 0.9.9.3 allows remote attackers to ...","CVE-2014-9304, CVE-2014-9304 vulnerability, CVE-2014-9304 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, plex security, media_server vulnerability","\u002Fwhat-is\u002Fcve-2014-9304",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-9304","Cybersecurity","CVE-2014-9304, CVE-2014-9304 vulnerability, CVE-2014-9304 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":15,"Negate":15,"Nodes":94},[95],{"Operator":96,"Negate":15,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":99,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":100},"E49716D0-0B27-4512-AF74-0E226CEB718E","0.9.9.2",[],[],{"lastModified":11,"cacheTime":104,"version":21},1793386428357,{"score":106,"band":107,"action":108,"scoredAt":109},46,"Medium","Plan remediation","2026-10-30T06:39:15.669639+00:00"]