CVEvulnerability
CVE-2009-0063
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• symantec brightmail gateway appliance (<= 8.0)
• symantec brightmail gateway appliance 7.5
• symantec brightmail gateway appliance 7.6
• symantec brightmail gateway appliance 7.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/53944 osvdb.org
- http://secunia.com/advisories/34885 secunia.com
- http://securitytracker.com/id?1022116 Patch
- http://www.securityfocus.com/bid/34641 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01 www.symantec.com
- http://www.vupen.com/english/advisories/2009/1155 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50074 exchange.xforce.ibmcloud.com
- http://osvdb.org/53944 osvdb.org
- http://secunia.com/advisories/34885 secunia.com
- http://securitytracker.com/id?1022116 Patch
- http://www.securityfocus.com/bid/34641 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01 www.symantec.com
- http://www.vupen.com/english/advisories/2009/1155 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50074 exchange.xforce.ibmcloud.com