CVE-2014-2589 in Sonicwall Network Security Appliance 2400

Summary

Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

03/23/2014

Disclosure

03/24/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
66772	Dell Sonicwall Network Security Appliance 2400 cross site scripting	79	High	Unavailable	CVE-2014-2589
12668	SonicWall dashboard.jsp cross site scripting	79	Not defined	Official fix	CVE-2014-2589
12605	SonicWALL NSA dashboard.jsp cross site scripting	79	High	Unavailable	CVE-2014-2589

Sources

• MITRE
• NVD
• CVE Details