CVE-2014-0332

2014-02-1416:55:08

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.

Affected configurations

Nvd

Node

sonicwallglobal_management_systemMatch7.0

sonicwallglobal_management_systemMatch7.1

sonicwallglobal_management_systemMatch7.1sp1

AND

sonicwalluma_e5000Match-

Node

sonicwallanalyzerMatch7.0

sonicwallanalyzerMatch7.1

sonicwallanalyzerMatch7.1sp1

Node

sonicwallglobal_management_systemMatch7.0

sonicwallglobal_management_systemMatch7.1

sonicwallglobal_management_systemMatch7.1sp1

VendorProductVersionCPE
sonicwallglobal_management_system7.0cpe:2.3:a:sonicwall:global_management_system:7.0:*:*:*:*:*:*:*
sonicwallglobal_management_system7.1cpe:2.3:a:sonicwall:global_management_system:7.1:*:*:*:*:*:*:*
sonicwallglobal_management_system7.1cpe:2.3:a:sonicwall:global_management_system:7.1:sp1:*:*:*:*:*:*
sonicwalluma_e5000-cpe:2.3:h:sonicwall:uma_e5000:-:*:*:*:*:*:*:*
sonicwallanalyzer7.0cpe:2.3:a:sonicwall:analyzer:7.0:*:*:*:*:*:*:*
sonicwallanalyzer7.1cpe:2.3:a:sonicwall:analyzer:7.1:*:*:*:*:*:*:*
sonicwallanalyzer7.1cpe:2.3:a:sonicwall:analyzer:7.1:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
sonicwall	global_management_system	7.0	cpe:2.3:a:sonicwall:global_management_system:7.0:::::::*
sonicwall	global_management_system	7.1	cpe:2.3:a:sonicwall:global_management_system:7.1:::::::*
sonicwall	global_management_system	7.1	cpe:2.3:a:sonicwall:global_management_system:7.1:sp1::::::
sonicwall	uma_e5000	-	cpe:2.3:h:sonicwall:uma_e5000:-:::::::*
sonicwall	analyzer	7.0	cpe:2.3:a:sonicwall:analyzer:7.0:::::::*
sonicwall	analyzer	7.1	cpe:2.3:a:sonicwall:analyzer:7.1:::::::*
sonicwall	analyzer	7.1	cpe:2.3:a:sonicwall:analyzer:7.1:sp1::::::