PT-2014-6427

Name of the Vulnerable Software and Affected Versions Riverbed Stingray aka SteelApp Traffic Manager Virtual Appliance version 9.6 patchlevel 9620140312 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web...

CVE-2014-5348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray aka SteelApp Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter...