CVE

Id
76525  
CVE No.
CVE-2014-9224  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20141203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
704074 76525 CVE-2014-9224 BUGTRAQ:20150122 SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP  View
704075 76525 CVE-2014-9224 URL:http://www.securityfocus.com/archive/1/archive/1/534527/100/0/threaded  View
704076 76525 CVE-2014-9224 FULLDISC:20150122 SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP  View
704077 76525 CVE-2014-9224 URL:http://seclists.org/fulldisclosure/2015/Jan/91  View
704078 76525 CVE-2014-9224 MISC:http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html  View
704079 76525 CVE-2014-9224 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00  View
704080 76525 CVE-2014-9224 BID:72093  View

Related JVN