CVE-2024-22397

creationtimestamp| type| source ---|---|--- 2024-03-14 05:21:46+00:00| seen| https://t.me/ctinow/207462 2024-03-14 05:26:56+00:00| seen| https://t.me/ctinow/207470 2025-03-27 17:26:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9153...

CVE-2024-22397

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code...

CVE-2024-22397

A Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicOS SSLVPN portal due to improper neutralization of input during web page generation. This flaw allows a remote authenticated attacker with firewall 'admin' privileges to store and execute arbitrary JavaScript code. The vulnerabi...

SonicOS SSLVPN Portal Stored Cross-site Scripting Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code. This vulnerability affects only SonicOS Gen7 firmware 7.0.1-5145,...