CVE-2014-5024 Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id par...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall analyzer | <= 7.2 | No fix listed |
| SonicWall global management system | <= 7.2 | No fix listed |
| SonicWall uma em5000 | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20140722 Reflected XSS vulnerabilities in DELL SonicWALL GMS 7.2 Build: 7221.1701 (CVE-2014-5024) exploit mailing-list third-party-advisory
- 60287 third-party-advisory
- 68829 exploit third-party-advisory vdb-entry
- support.software.dell.com vendor-advisory