CVE - CVE-2013-7025

CVE-ID
CVE-2013-7025	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:64103 URL:http://www.securityfocus.com/bid/64103 BUGTRAQ:20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day) URL:http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html CONFIRM:http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf EXPLOIT-DB:30054 URL:http://www.exploit-db.com/exploits/30054 FULLDISC:20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability URL:http://seclists.org/fulldisclosure/2013/Dec/32 MISC:http://www.vulnerability-lab.com/get_content.php?id=1099 OSVDB:100610 URL:~~http://osvdb.org/100610~~ (Obsolete source) SECTRACK:1029433 URL:http://www.securitytracker.com/id/1029433 SECUNIA:55923 URL:http://secunia.com/advisories/55923 XF:sonicwall-ematstaticalerttypes-xss(89462) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/89462
Assigning CNA
MITRE Corporation
Date Record Created
20131208	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20131208)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)