CVE-2014-3432

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

CVE-2014-3433

CVE-2014-3433 affects the Symantec Data Insight management console (3.x and 4.x up to 4.5). The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient sanitization of user-supplied input in the management GUI, allowing an attacker to inject arbitrary script or HTML via an unspe...

CVE-2014-3433: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue...

CVE-2014-3432: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

PT-2014-5319

Name of the Vulnerable Software and Affected Versions Symantec Data Insight versions 3.x through 4.x before 4.5 Description A cross-site scripting XSS issue exists in the management console, allowing remote attackers to inject arbitrary web script or HTML via an unspecified form field. This is...

PT-2014-5318

Name of the Vulnerable Software and Affected Versions Symantec Data Insight versions 3.x through 4.x before 4.5 Description A cross-site scripting XSS issue exists in the management console, allowing remote attackers to inject arbitrary web script or HTML via an unspecified form field. This could...

Symantec Data Insight Management Console HTML Injection and Cross-Site Scripting

SUMMARY The management console for Symantec Data Insight does not sufficiently validate/sanitize arbitrary input in two separate fields within the management GUI. This could potentially allow unauthorized command execution or potential malicious redirection. AFFECTED PRODUCTS Product | Version |...