What’s Vulnerable › Vulnerabilities

CVE-2014-8734

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-12 · updated 2026-06-17
• Weakness: CWE-264

Description

The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors.

Affected products

• Drupal Organic Groups Menu: through 7.x-2.1; 7.x-2.0, 7.x-2.x-dev

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/98445
• https://www.drupal.org/node/2365259
• https://www.drupal.org/node/2365685
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98445
• https://www.drupal.org/node/2365259
• https://www.drupal.org/node/2365685

Get alerted when CVE-2014-8734 or the next vulnerability affects your stack