CVEvulnerability
CVE-2013-7025
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-12-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
Affected configurations
• sonicwall analyzer 7.0
• sonicwall analyzer 7.1
• sonicwall global management system 7.0
• sonicwall global management system 7.1
• sonicwall uma e5000 firmware 7.0
• sonicwall uma e5000 firmware 7.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html Third Party Advisory
- http://osvdb.org/100610 Broken Link
- http://seclists.org/fulldisclosure/2013/Dec/32 Exploit, Mailing List, Third Party Advisory
- http://secunia.com/advisories/55923 Third Party Advisory
- http://www.exploit-db.com/exploits/30054 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/64103 Exploit, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029433 Third Party Advisory, VDB Entry
- http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf Vendor Advisory
- http://www.vulnerability-lab.com/get_content.php?id=1099 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89462 VDB Entry
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html Third Party Advisory
- http://osvdb.org/100610 Broken Link
- http://seclists.org/fulldisclosure/2013/Dec/32 Exploit, Mailing List, Third Party Advisory
- http://secunia.com/advisories/55923 Third Party Advisory
- http://www.exploit-db.com/exploits/30054 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/64103 Exploit, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029433 Third Party Advisory, VDB Entry
- http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf Vendor Advisory
- http://www.vulnerability-lab.com/get_content.php?id=1099 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89462 VDB Entry