Unscored CVE-2013-1614 EUVD-2013-1649GHSA-p2pv-cg7x-h35m

Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manag…

Published Jul 8, 2013 · Updated Sep 16, 2024 · Assigned by symantec

Description

Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130701_00
60797 vdb-entry