Lucene search

K
cvelistSymantecCVELIST:CVE-2014-1648
HistoryApr 23, 2014 - 10:00 a.m.

CVE-2014-1648

2014-04-2310:00:00
symantec
www.cve.org
3

AI Score

5.6

Confidence

High

EPSS

0.43

Percentile

97.4%

Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter.

AI Score

5.6

Confidence

High

EPSS

0.43

Percentile

97.4%