CVEvulnerability
CVE-2014-3432
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.
Affected configurations
• symantec data insight 3.0
• symantec data insight 3.0.1
• symantec data insight 4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/59538 secunia.com
- http://secunia.com/advisories/59561 secunia.com
- http://www.securityfocus.com/bid/68160 www.securityfocus.com
- http://www.securitytracker.com/id/1030472 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 Vendor Advisory
- http://secunia.com/advisories/59538 secunia.com
- http://secunia.com/advisories/59561 secunia.com
- http://www.securityfocus.com/bid/68160 www.securityfocus.com
- http://www.securitytracker.com/id/1030472 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 Vendor Advisory