CVE-2014-2589

CVE-2014-2589 describes a Cross-Site Scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) of SonicWall Network Security Appliance (NSA) 2400. The issue allows remote attackers to inject arbitrary web script or HTML via the sn parameter. Documentation confirms the a...