CVEvulnerability
CVE-2014-9230
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• symantec data loss prevention (<= 12.5.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/75288 www.securityfocus.com
- http://www.securitytracker.com/id/1032710 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00 Vendor Advisory
- http://www.securityfocus.com/bid/75288 www.securityfocus.com
- http://www.securitytracker.com/id/1032710 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00 Vendor Advisory