Unscored CVE-2014-0338 EUVD-2014-0376GHSA-g7gv-rfjx-h946

Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow …

Published Mar 16, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the pol_name parameter.

References

1029924 vdb-entry
VU#807134 third-party-advisory
http://watchguardsecuritycenter.com/2014/03/13/fireware-xtm-11-8-3-update-corrects-xss-flaw/
20140313 WatchGuard Fireware XTM devices contain a cross-site scripting vulnerability (CVE-2014-0338) mailing-list
66210 vdb-entry