CVE-2013-7025
SonicWALL Gms 7.x - Filter Bypass / Persistent
Severity Score
3.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
5
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
Múltiples vulnerabilidades XSS en ematStaticAlertTypes.jsp en la sección de ajustes de alertas en Dell SonicWALL Global Management System (GMS), Analyzer, y UMA EM5000 7.1 SP1 anterior al Hotfix 134235 permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML arbitrarias a través de los parámetros (1) valfield_1 o (2) value_1 a createNewThreshold.jsp.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-12-05 First Exploit
- 2013-12-08 CVE Reserved
- 2013-12-09 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html | Mailing List | |
| http://osvdb.org/100610 | Broken Link | |
| http://secunia.com/advisories/55923 | Third Party Advisory | |
| http://www.securitytracker.com/id/1029433 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/89462 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/30054 | 2013-12-05 | |
| http://seclists.org/fulldisclosure/2013/Dec/32 | 2024-08-06 | |
| http://www.exploit-db.com/exploits/30054 | 2024-08-06 | |
| http://www.securityfocus.com/bid/64103 | 2024-08-06 | |
| http://www.vulnerability-lab.com/get_content.php?id=1099 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf | 2018-03-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sonicwall Search vendor "Sonicwall" | Uma E5000 Firmware Search vendor "Sonicwall" for product "Uma E5000 Firmware" | 7.0 Search vendor "Sonicwall" for product "Uma E5000 Firmware" and version "7.0" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Uma E5000 Search vendor "Sonicwall" for product "Uma E5000" | - | - |
Safe
|
| Sonicwall Search vendor "Sonicwall" | Uma E5000 Firmware Search vendor "Sonicwall" for product "Uma E5000 Firmware" | 7.1 Search vendor "Sonicwall" for product "Uma E5000 Firmware" and version "7.1" | - |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Uma E5000 Search vendor "Sonicwall" for product "Uma E5000" | - | - |
Safe
|
| Sonicwall Search vendor "Sonicwall" | Uma E5000 Firmware Search vendor "Sonicwall" for product "Uma E5000 Firmware" | 7.1 Search vendor "Sonicwall" for product "Uma E5000 Firmware" and version "7.1" | sp1 |
Affected
| in | Sonicwall Search vendor "Sonicwall" | Uma E5000 Search vendor "Sonicwall" for product "Uma E5000" | - | - |
Safe
|
| Sonicwall Search vendor "Sonicwall" | Analyzer Search vendor "Sonicwall" for product "Analyzer" | 7.0 Search vendor "Sonicwall" for product "Analyzer" and version "7.0" | - |
Affected
| ||||||
| Sonicwall Search vendor "Sonicwall" | Analyzer Search vendor "Sonicwall" for product "Analyzer" | 7.1 Search vendor "Sonicwall" for product "Analyzer" and version "7.1" | - |
Affected
| ||||||
| Sonicwall Search vendor "Sonicwall" | Analyzer Search vendor "Sonicwall" for product "Analyzer" | 7.1 Search vendor "Sonicwall" for product "Analyzer" and version "7.1" | sp1 |
Affected
| ||||||
| Sonicwall Search vendor "Sonicwall" | Global Management System Search vendor "Sonicwall" for product "Global Management System" | 7.0 Search vendor "Sonicwall" for product "Global Management System" and version "7.0" | - |
Affected
| ||||||
| Sonicwall Search vendor "Sonicwall" | Global Management System Search vendor "Sonicwall" for product "Global Management System" | 7.1 Search vendor "Sonicwall" for product "Global Management System" and version "7.1" | - |
Affected
| ||||||
| Sonicwall Search vendor "Sonicwall" | Global Management System Search vendor "Sonicwall" for product "Global Management System" | 7.1 Search vendor "Sonicwall" for product "Global Management System" and version "7.1" | sp1 |
Affected
| ||||||