CVEvulnerability
CVE-2014-2844
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin.
Affected configurations
• f-secure secure messaging secure gateway 7.5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/fulldisclosure/2014/Apr/223 Exploit
- http://secunia.com/advisories/58038 Vendor Advisory
- http://www.f-secure.com/en/web/labs_global/fsc-2014-2 Vendor Advisory
- http://seclists.org/fulldisclosure/2014/Apr/223 Exploit
- http://secunia.com/advisories/58038 Vendor Advisory
- http://www.f-secure.com/en/web/labs_global/fsc-2014-2 Vendor Advisory