CVE-2023-46964

2023-11-0400:00:00

Hillstone

www.cve.org

cross site scripting

hillstone

ngfw

remote attacker

arbitrary code

front-end filtering

back-end filtering

0.001 Low

EPSS

Percentile

28.0%

JSON

Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.

CNA Affected

[
  {
    "vendor": "Hillstone",
    "product": "Next Generation FireWall SG-6000-E3960",
    "versions": [
      {
        "version": "Version 5.5",
        "status": "affected"
      }
    ]
  }
]