CVE-2014-1648 in Messaging Gateway
Summary
Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/23/2014
Disclosure
04/23/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13043 | Symantec Messaging Gateway DlpConnectFlow$view.flo cross site scripting | 79 | High | Official fix | CVE-2014-1648 |