CVE-2014-3110

Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.

• CWE-79

• http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/68838
• https://www.exploit-db.com/exploits/44749/
• http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/68838
• https://www.exploit-db.com/exploits/44749/

Published

Jul 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3101The login form in the Web component in IBM Rational ClearQue…
• CVE-2014-3102Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2014-3103The Web component in IBM Rational ClearQuest 7.1 before 7.1.…
• CVE-2014-3104IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.…
• CVE-2014-3105The OSLC integration feature in the Web component in IBM Rat…
• CVE-2014-3106IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.…
• CVE-2014-3111Multiple cross-site scripting (XSS) vulnerabilities in FOG 0…
• CVE-2014-3113Multiple buffer overflows in RealNetworks RealPlayer before …
• CVE-2014-3114The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.…
• CVE-2014-3115Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-3119Multiple SQL injection vulnerabilities in web2Project 3.1 an…8.8
• CVE-2014-3120The default configuration in Elasticsearch before 1.2 enable…8.1