3.5

CVE-2013-7025

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sonicwall ≫ Analyzer Version 7.0
Sonicwall ≫ Analyzer Version 7.1
Sonicwall ≫ Analyzer Version 7.1 Update sp1
Sonicwall ≫ Global Management System Version 7.1 Update sp1
Sonicwall ≫ Uma E5000 Firmware Version 7.0
   Sonicwall ≫ Uma E5000 Version -
Sonicwall ≫ Uma E5000 Firmware Version 7.1
   Sonicwall ≫ Uma E5000 Version -
Sonicwall ≫ Uma E5000 Firmware Version 7.1 Update sp1
   Sonicwall ≫ Uma E5000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.34% 0.899
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html
Third Party Advisory
http://osvdb.org/100610
Broken Link
http://seclists.org/fulldisclosure/2013/Dec/32
Third Party Advisory
Exploit
Mailing List
http://secunia.com/advisories/55923
Third Party Advisory
http://www.exploit-db.com/exploits/30054
Third Party Advisory
Exploit
VDB Entry
http://www.securityfocus.com/bid/64103
Third Party Advisory
Exploit
VDB Entry
http://www.securitytracker.com/id/1029433
Third Party Advisory
VDB Entry
http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf
Vendor Advisory
http://www.vulnerability-lab.com/get_content.php?id=1099
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/89462
VDB Entry