CVE-2014-2589 in Sonicwall Network Security Appliance 2400

Zusammenfassung (Englisch)

Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservieren

23.03.2014

Veröffentlichung

24.03.2014

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
66772	Dell Sonicwall Network Security Appliance 2400 Cross Site Scripting	79	High	Unavailable	CVE-2014-2589
12668	SonicWall dashboard.jsp Cross Site Scripting	79	Nicht definiert	Offizieller Fix	CVE-2014-2589
12605	SonicWALL NSA dashboard.jsp Cross Site Scripting	79	High	Unavailable	CVE-2014-2589

Quellen

• MITRE
• NVD
• CVE Details