Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2013-7025

Published: 09/12/2013 Updated: 12/03/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Subscribe to Global Management System

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

Vulnerable Product Search on Vulmon Subscribe to Product

sonicwall global management system 7.1

sonicwall analyzer 7.1

sonicwall global management system 7.0

sonicwall analyzer 7.0

sonicwall uma_e5000_firmware 7.0

sonicwall uma_e5000_firmware 7.1

Exploits

Exploit DB: SonicWALL Gms 7.x - Filter Bypass / Persistent
Document Title: =============== Sonicwall GMS v7x - Filter Bypass & Persistent Vulnerability References (Source): ==================== wwwvulnerability-labcom/get_contentphp?id=1099 Bulletin: Dell SonicWALL GMS Service Bulletin for Cross-Site Scripting Vulnerability wwwsonicwallcom/us/shared/download/Support_Bulletin_GMS_ ...

References

CWE-79http://www.exploit-db.com/exploits/30054http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdfhttp://seclists.org/fulldisclosure/2013/Dec/32http://www.vulnerability-lab.com/get_content.php?id=1099http://www.securityfocus.com/bid/64103http://www.securitytracker.com/id/1029433http://osvdb.org/100610http://secunia.com/advisories/55923http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/89462https://nvd.nist.govhttps://www.exploit-db.com/exploits/30054/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook