CVE-2009-0063

2009-04-2415:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-0063

cross-site scripting

xss

symantec brightmail

appliance

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

JSON

Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

symantecbrightmail_gateway_applianceRange≤8.0

symantecbrightmail_gateway_applianceMatch7.5

symantecbrightmail_gateway_applianceMatch7.6

symantecbrightmail_gateway_applianceMatch7.7

CPENameOperatorVersion
symantec:brightmail_gateway_appliancesymantec brightmail gateway appliancele8.0
symantec:brightmail_gateway_appliancesymantec brightmail gateway applianceeq7.5
symantec:brightmail_gateway_appliancesymantec brightmail gateway applianceeq7.6
symantec:brightmail_gateway_appliancesymantec brightmail gateway applianceeq7.7

CPE	Name	Operator	Version
symantec:brightmail_gateway_appliance	symantec brightmail gateway appliance	le	8.0
symantec:brightmail_gateway_appliance	symantec brightmail gateway appliance	eq	7.5
symantec:brightmail_gateway_appliance	symantec brightmail gateway appliance	eq	7.6
symantec:brightmail_gateway_appliance	symantec brightmail gateway appliance	eq	7.7