CVE-2014-9608 Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary we...
MediumCVSS 6.1
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsweeper | < 3.1.10 | 3.1.10 |
| netsweeper | >= 4.0.0, < 4.0.9 | 4.0.9 |
| netsweeper | >= 4.1.0, < 4.1.2 | 4.1.2 |
References
- packetstormsecurity.com third-party-advisory vdb-entry