CVE-2014-1648

Cross-site scripting XSS vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter...

PT-2014-4277

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.5.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the displayTab parameter in the management console. Recommendations F...

CVE-2014-1648: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows remote attackers to inject arbitrary web script or HTML via the displayTab parameter...