CVE-2014-2879

Multiple cross-site scripting XSS vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the uploadPatch parameter to the System/Advanced page settingsadvanced.html or 2 the uploadLicenses parameter...

PT-2014-4942

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Email Security versions 7.4.5 and earlier Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the uploadPatch parameter to the "System/Advanced" page...

CVE-2014-2879: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the uploadPatch parameter to the System/Advanced page settingsadvanced.html or 2 the uploadLicenses parameter...