CVE-2014-3809 in 1830 Photonic Service Switch PSS-32

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2014-05-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
68305	Alcatel-Lucent 1830 Photonic Service Switch PSS-32/16/4 pop.html secuencias de comandos en sitios cruzados	80	Alto	Solución alternativa	CVE-2014-3809

Fuentes

• MITRE
• NVD
• CVE Details