CVEvulnerability
CVE-2013-4674
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment.
Affected configurations
• symantec encryption management server (<= 3.3.0)
• symantec encryption management server 3.3.0
• symantec pgp universal server 3.2.0
• symantec pgp universal server 3.2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/95581 osvdb.org
- http://secunia.com/advisories/54214 secunia.com
- http://www.securityfocus.com/bid/61290 www.securityfocus.com
- http://www.securitytracker.com/id/1028820 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130722_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85902 exchange.xforce.ibmcloud.com
- http://osvdb.org/95581 osvdb.org
- http://secunia.com/advisories/54214 secunia.com
- http://www.securityfocus.com/bid/61290 www.securityfocus.com
- http://www.securitytracker.com/id/1028820 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130722_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85902 exchange.xforce.ibmcloud.com