CVEvulnerability
CVE-2014-3433
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue.
Affected configurations
• symantec data insight 3.0
• symantec data insight 3.0.1
• symantec data insight 4.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/68161 www.securityfocus.com
- http://www.securitytracker.com/id/1030472 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 Vendor Advisory
- http://www.securityfocus.com/bid/68161 www.securityfocus.com
- http://www.securitytracker.com/id/1030472 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00 Vendor Advisory