CVE-2014-3432

Symantec Data Insight

CVE-2014-3432

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

CVE-2014-3433: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue...

CVE-2014-3432: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field...

PT-2014-5319

Name of the Vulnerable Software and Affected Versions Symantec Data Insight versions 3.x through 4.x before 4.5 Description A cross-site scripting XSS issue exists in the management console, allowing remote attackers to inject arbitrary web script or HTML via an unspecified form field. This is...

PT-2014-5318

Name of the Vulnerable Software and Affected Versions Symantec Data Insight versions 3.x through 4.x before 4.5 Description A cross-site scripting XSS issue exists in the management console, allowing remote attackers to inject arbitrary web script or HTML via an unspecified form field. This could...

Symantec Data Insight Management Console HTML Injection and Cross-Site Scripting

SUMMARY The management console for Symantec Data Insight does not sufficiently validate/sanitize arbitrary input in two separate fields within the management GUI. This could potentially allow unauthorized command execution or potential malicious redirection. AFFECTED PRODUCTS Product | Version |...