{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "cross-site scripting flaw in Runtime_SetPrototype()",
    "tracking": {
      "current_release_date": "2026-08-11T13:57:10+00:00",
      "generator": {
        "date": "2026-08-11T13:57:10+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-1716",
      "initial_release_date": "2014-03-20T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T13:57:10+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat CloudForms unspecified",
            "product": {
              "name": "Red Hat CloudForms unspecified",
              "product_id": "cfme-5",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:cloudforms_managementengine:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform",
            "product": {
              "name": "OpenShift Container Platform",
              "product_id": "openshift-enterprise-1",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "OpenShift Container Platform 2.2.0",
            "product": {
              "name": "OpenShift Container Platform 2.2.0",
              "product_id": "openshift-enterprise-2.2",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform",
            "product": {
              "name": "Red Hat OpenStack Platform",
              "product_id": "openstack-3",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:3"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform",
            "product": {
              "name": "Red Hat OpenStack Platform",
              "product_id": "openstack-4",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite 6.15.0",
            "product": {
              "name": "Red Hat Satellite 6.15.0",
              "product_id": "rhn_satellite_6.15",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite 6.16.0",
            "product": {
              "name": "Red Hat Satellite 6.16.0",
              "product_id": "rhn_satellite_6.16",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite:6.16"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite 6.17.0",
            "product": {
              "name": "Red Hat Satellite 6.17.0",
              "product_id": "rhn_satellite_6.17",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite:6.17"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Software Collections",
            "product": {
              "name": "Red Hat Software Collections",
              "product_id": "rhscl-1.2.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_software_collections:1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Subscription Asset Manager 1.4",
            "product": {
              "name": "Red Hat Subscription Asset Manager 1.4",
              "product_id": "sam-1",
              "product_identification_helper": {
                "cpe": "cpe:/a:rhel_sam:1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite 6.18.0",
            "product": {
              "name": "Red Hat Satellite 6.18.0",
              "product_id": "satellite_6.18",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite:6.18"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ruby193-v8",
            "product": {
              "name": "ruby193-v8",
              "product_id": "ruby193-v8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ruby193-v8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ruby193-v8-devel",
            "product": {
              "name": "ruby193-v8-devel",
              "product_id": "ruby193-v8-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ruby193-v8-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ruby193-v8",
            "product": {
              "name": "ruby193-v8",
              "product_id": "ruby193-v8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ruby193-v8?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8",
            "product": {
              "name": "v8",
              "product_id": "v8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8-devel",
            "product": {
              "name": "v8-devel",
              "product_id": "v8-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8",
            "product": {
              "name": "v8",
              "product_id": "v8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8314-v8",
            "product": {
              "name": "v8314-v8",
              "product_id": "v8314-v8",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8314-v8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8314-v8-devel",
            "product": {
              "name": "v8314-v8-devel",
              "product_id": "v8314-v8-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8314-v8-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "v8314-v8",
            "product": {
              "name": "v8314-v8",
              "product_id": "v8314-v8.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/v8314-v8?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8 as a component of OpenShift Container Platform",
          "product_id": "openshift-enterprise-1:ruby193-v8"
        },
        "product_reference": "ruby193-v8",
        "relates_to_product_reference": "openshift-enterprise-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8 as a component of Red Hat CloudForms unspecified",
          "product_id": "cfme-5:ruby193-v8"
        },
        "product_reference": "ruby193-v8",
        "relates_to_product_reference": "cfme-5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8 as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:ruby193-v8"
        },
        "product_reference": "ruby193-v8",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8 as a component of Red Hat Subscription Asset Manager 1.4",
          "product_id": "sam-1:ruby193-v8"
        },
        "product_reference": "ruby193-v8",
        "relates_to_product_reference": "sam-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8 as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:ruby193-v8"
        },
        "product_reference": "ruby193-v8",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8-devel as a component of OpenShift Container Platform",
          "product_id": "openshift-enterprise-1:ruby193-v8-devel"
        },
        "product_reference": "ruby193-v8-devel",
        "relates_to_product_reference": "openshift-enterprise-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8-devel as a component of Red Hat CloudForms unspecified",
          "product_id": "cfme-5:ruby193-v8-devel"
        },
        "product_reference": "ruby193-v8-devel",
        "relates_to_product_reference": "cfme-5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8-devel as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:ruby193-v8-devel"
        },
        "product_reference": "ruby193-v8-devel",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8-devel as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:ruby193-v8-devel"
        },
        "product_reference": "ruby193-v8-devel",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8.src as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:ruby193-v8.src"
        },
        "product_reference": "ruby193-v8.src",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8.src as a component of Red Hat Subscription Asset Manager 1.4",
          "product_id": "sam-1:ruby193-v8.src"
        },
        "product_reference": "ruby193-v8.src",
        "relates_to_product_reference": "sam-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8.src as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:ruby193-v8.src"
        },
        "product_reference": "ruby193-v8.src",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8.src as a component of OpenShift Container Platform",
          "product_id": "openshift-enterprise-1:ruby193-v8.src"
        },
        "product_reference": "ruby193-v8.src",
        "relates_to_product_reference": "openshift-enterprise-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby193-v8.src as a component of Red Hat CloudForms unspecified",
          "product_id": "cfme-5:ruby193-v8.src"
        },
        "product_reference": "ruby193-v8.src",
        "relates_to_product_reference": "cfme-5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8 as a component of OpenShift Container Platform 2.2.0",
          "product_id": "openshift-enterprise-2.2:v8"
        },
        "product_reference": "v8",
        "relates_to_product_reference": "openshift-enterprise-2.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8 as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:v8"
        },
        "product_reference": "v8",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8 as a component of Red Hat Subscription Asset Manager 1.4",
          "product_id": "sam-1:v8"
        },
        "product_reference": "v8",
        "relates_to_product_reference": "sam-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8 as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:v8"
        },
        "product_reference": "v8",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8-devel as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:v8-devel"
        },
        "product_reference": "v8-devel",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8-devel as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:v8-devel"
        },
        "product_reference": "v8-devel",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8-devel as a component of OpenShift Container Platform 2.2.0",
          "product_id": "openshift-enterprise-2.2:v8-devel"
        },
        "product_reference": "v8-devel",
        "relates_to_product_reference": "openshift-enterprise-2.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat Satellite 6.17.0",
          "product_id": "rhn_satellite_6.17:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "rhn_satellite_6.17"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat Satellite 6.18.0",
          "product_id": "satellite_6.18:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "satellite_6.18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat Satellite 6.16.0",
          "product_id": "rhn_satellite_6.16:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "rhn_satellite_6.16"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat Subscription Asset Manager 1.4",
          "product_id": "sam-1:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "sam-1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-3:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "openstack-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat OpenStack Platform",
          "product_id": "openstack-4:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "openstack-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of OpenShift Container Platform 2.2.0",
          "product_id": "openshift-enterprise-2.2:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "openshift-enterprise-2.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8.src as a component of Red Hat Satellite 6.15.0",
          "product_id": "rhn_satellite_6.15:v8.src"
        },
        "product_reference": "v8.src",
        "relates_to_product_reference": "rhn_satellite_6.15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8314-v8 as a component of Red Hat Software Collections",
          "product_id": "rhscl-1.2.z:v8314-v8"
        },
        "product_reference": "v8314-v8",
        "relates_to_product_reference": "rhscl-1.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8314-v8-devel as a component of Red Hat Software Collections",
          "product_id": "rhscl-1.2.z:v8314-v8-devel"
        },
        "product_reference": "v8314-v8-devel",
        "relates_to_product_reference": "rhscl-1.2.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "v8314-v8.src as a component of Red Hat Software Collections",
          "product_id": "rhscl-1.2.z:v8314-v8.src"
        },
        "product_reference": "v8314-v8.src",
        "relates_to_product_reference": "rhscl-1.2.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1716",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "discovery_date": "2014-04-09T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "cfme-5:ruby193-v8",
            "cfme-5:ruby193-v8-devel",
            "cfme-5:ruby193-v8.src",
            "openshift-enterprise-1:ruby193-v8",
            "openshift-enterprise-1:ruby193-v8-devel",
            "openshift-enterprise-1:ruby193-v8.src",
            "openshift-enterprise-2.2:v8",
            "openshift-enterprise-2.2:v8-devel",
            "openshift-enterprise-2.2:v8.src",
            "openstack-3:ruby193-v8",
            "openstack-3:ruby193-v8-devel",
            "openstack-3:ruby193-v8.src",
            "openstack-3:v8",
            "openstack-3:v8-devel",
            "openstack-3:v8.src",
            "openstack-4:ruby193-v8",
            "openstack-4:ruby193-v8-devel",
            "openstack-4:ruby193-v8.src",
            "openstack-4:v8",
            "openstack-4:v8-devel",
            "openstack-4:v8.src",
            "rhn_satellite_6.15:v8.src",
            "rhn_satellite_6.16:v8.src",
            "rhn_satellite_6.17:v8.src",
            "rhscl-1.2.z:v8314-v8",
            "rhscl-1.2.z:v8314-v8-devel",
            "rhscl-1.2.z:v8314-v8.src",
            "sam-1:ruby193-v8",
            "sam-1:ruby193-v8.src",
            "sam-1:v8",
            "sam-1:v8.src",
            "satellite_6.18:v8.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS).\"",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "cfme-5:ruby193-v8",
          "cfme-5:ruby193-v8-devel",
          "cfme-5:ruby193-v8.src",
          "openshift-enterprise-1:ruby193-v8",
          "openshift-enterprise-1:ruby193-v8-devel",
          "openshift-enterprise-1:ruby193-v8.src",
          "openshift-enterprise-2.2:v8",
          "openshift-enterprise-2.2:v8-devel",
          "openshift-enterprise-2.2:v8.src",
          "openstack-3:ruby193-v8",
          "openstack-3:ruby193-v8-devel",
          "openstack-3:ruby193-v8.src",
          "openstack-3:v8",
          "openstack-3:v8-devel",
          "openstack-3:v8.src",
          "openstack-4:ruby193-v8",
          "openstack-4:ruby193-v8-devel",
          "openstack-4:ruby193-v8.src",
          "openstack-4:v8",
          "openstack-4:v8-devel",
          "openstack-4:v8.src",
          "rhn_satellite_6.15:v8.src",
          "rhn_satellite_6.16:v8.src",
          "rhn_satellite_6.17:v8.src",
          "rhscl-1.2.z:v8314-v8",
          "rhscl-1.2.z:v8314-v8-devel",
          "rhscl-1.2.z:v8314-v8.src",
          "sam-1:ruby193-v8",
          "sam-1:ruby193-v8.src",
          "sam-1:v8",
          "sam-1:v8.src",
          "satellite_6.18:v8.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1716"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1716"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1716"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore": 4.3
          },
          "products": [
            "cfme-5:ruby193-v8",
            "cfme-5:ruby193-v8-devel",
            "cfme-5:ruby193-v8.src",
            "openshift-enterprise-1:ruby193-v8",
            "openshift-enterprise-1:ruby193-v8-devel",
            "openshift-enterprise-1:ruby193-v8.src",
            "openshift-enterprise-2.2:v8",
            "openshift-enterprise-2.2:v8-devel",
            "openshift-enterprise-2.2:v8.src",
            "openstack-3:ruby193-v8",
            "openstack-3:ruby193-v8-devel",
            "openstack-3:ruby193-v8.src",
            "openstack-3:v8",
            "openstack-3:v8-devel",
            "openstack-3:v8.src",
            "openstack-4:ruby193-v8",
            "openstack-4:ruby193-v8-devel",
            "openstack-4:ruby193-v8.src",
            "openstack-4:v8",
            "openstack-4:v8-devel",
            "openstack-4:v8.src",
            "rhn_satellite_6.15:v8.src",
            "rhn_satellite_6.16:v8.src",
            "rhn_satellite_6.17:v8.src",
            "rhscl-1.2.z:v8314-v8",
            "rhscl-1.2.z:v8314-v8-devel",
            "rhscl-1.2.z:v8314-v8.src",
            "sam-1:ruby193-v8",
            "sam-1:ruby193-v8.src",
            "sam-1:v8",
            "sam-1:v8.src",
            "satellite_6.18:v8.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "cfme-5:ruby193-v8",
            "cfme-5:ruby193-v8-devel",
            "cfme-5:ruby193-v8.src",
            "openshift-enterprise-1:ruby193-v8",
            "openshift-enterprise-1:ruby193-v8-devel",
            "openshift-enterprise-1:ruby193-v8.src",
            "openshift-enterprise-2.2:v8",
            "openshift-enterprise-2.2:v8-devel",
            "openshift-enterprise-2.2:v8.src",
            "openstack-3:ruby193-v8",
            "openstack-3:ruby193-v8-devel",
            "openstack-3:ruby193-v8.src",
            "openstack-3:v8",
            "openstack-3:v8-devel",
            "openstack-3:v8.src",
            "openstack-4:ruby193-v8",
            "openstack-4:ruby193-v8-devel",
            "openstack-4:ruby193-v8.src",
            "openstack-4:v8",
            "openstack-4:v8-devel",
            "openstack-4:v8.src",
            "rhn_satellite_6.15:v8.src",
            "rhn_satellite_6.16:v8.src",
            "rhn_satellite_6.17:v8.src",
            "rhscl-1.2.z:v8314-v8",
            "rhscl-1.2.z:v8314-v8-devel",
            "rhscl-1.2.z:v8314-v8.src",
            "sam-1:ruby193-v8",
            "sam-1:ruby193-v8.src",
            "sam-1:v8",
            "sam-1:v8.src",
            "satellite_6.18:v8.src"
          ]
        }
      ],
      "title": "cross-site scripting flaw in Runtime_SetPrototype()"
    }
  ]
}