exploitDog

CVE-2009-0063

Опубликовано: 24 апр. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://osvdb.org/53944
http://secunia.com/advisories/34885
http://securitytracker.com/id?1022116
Patch
http://www.securityfocus.com/bid/34641
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
http://www.vupen.com/english/advisories/2009/1155
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50074
http://osvdb.org/53944
http://secunia.com/advisories/34885
http://securitytracker.com/id?1022116
Patch
http://www.securityfocus.com/bid/34641
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
http://www.vupen.com/english/advisories/2009/1155
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50074

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:symantec:brightmail_gateway_appliance:*:*:*:*:*:*:*:*

Версия до 8.0 (включая)

cpe:2.3:h:symantec:brightmail_gateway_appliance:7.5:*:*:*:*:*:*:*

cpe:2.3:h:symantec:brightmail_gateway_appliance:7.6:*:*:*:*:*:*:*

cpe:2.3:h:symantec:brightmail_gateway_appliance:7.7:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.01328

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-79xc-2343-62m7

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

EPSS

Процентиль: 68%

0.01328

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79