NVD

Id
41862  
Name
CVE-2013-7025  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-09  
Modified Date
2013-12-13  
Seq
2013-7025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211377 41862 CVE-2013-7025 20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day)  View
211378 41862 CVE-2013-7025 20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability  View
211379 41862 CVE-2013-7025 30054  View
211380 41862 CVE-2013-7025 64103  View
211381 41862 CVE-2013-7025 1029433  View
211382 41862 CVE-2013-7025 http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf  View
211383 41862 CVE-2013-7025 http://www.vulnerability-lab.com/get_content.php?id=1099  View
211384 41862 CVE-2013-7025 sonicwall-ematstaticalerttypes-xss(89462)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23921 JVNDB-2013-005496 複数の Dell SonicWALL 製品の Alert Settings セクションにおけるクロスサイトスクリプティングの脆弱性 Dell SonicWALL Global Management System (GMS)、Analyzer、および UMA EM5000 の Alert Settings セクションの ematStaticAlertTypes.jsp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-7025 66967 CVE-2013-7025 41862 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005496.html 2013-12-05 2013-12-16 View