CVE-2014-1648 in Messaging Gateway

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

23/01/2014

Divulgação

23/04/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
13043	Symantec Messaging Gateway DlpConnectFlow$view.flo Script de Site Cruzado	79	Alto	Correção oficial	CVE-2014-1648

Fontes

• MITRE
• NVD
• CVE Details