Cross site scripting

2009-10-1510:30:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

JSON

Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via “external client input” that triggers crafted error messages.

CPENameOperatorVersion
securityexpressions_audit_and_compliance_servereq4.1
securityexpressions_audit_and_compliance_serverle4.1.1

CPE	Name	Operator	Version
	securityexpressions_audit_and_compliance_server	eq	4.1
	securityexpressions_audit_and_compliance_server	le	4.1.1

References

secunia.com/advisories/36972

securitytracker.com/id?1022989

www.osvdb.org/58651

www.securityfocus.com/bid/36570

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00

www.vupen.com/english/advisories/2009/2849