CVE-2013-1614

2022-10-0316:14:49

CWE-79

[email protected]

web.nvd.nist.gov

symantec

ssim

xss

vulnerability

security

nvd

cve-2013-1614

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

symantecsecurity_information_managerMatch4.7.0

symantecsecurity_information_managerMatch4.7.1

symantecsecurity_information_managerMatch4.7.2

symantecsecurity_information_managerMatch4.7.3

symantecsecurity_information_managerMatch4.7.4

symantecsecurity_information_managerMatch4.8.0

symantecsecurity_information_manager_applianceMatch-

CPENameOperatorVersion
symantec:security_information_managersymantec security information managereq4.7.0
symantec:security_information_managersymantec security information managereq4.7.1
symantec:security_information_managersymantec security information managereq4.7.2
symantec:security_information_managersymantec security information managereq4.7.3
symantec:security_information_managersymantec security information managereq4.7.4
symantec:security_information_managersymantec security information managereq4.8.0
symantec:security_information_manager_appliancesymantec security information manager applianceeq-

CPE	Name	Operator	Version
symantec:security_information_manager	symantec security information manager	eq	4.7.0
symantec:security_information_manager	symantec security information manager	eq	4.7.1
symantec:security_information_manager	symantec security information manager	eq	4.7.2
symantec:security_information_manager	symantec security information manager	eq	4.7.3
symantec:security_information_manager	symantec security information manager	eq	4.7.4
symantec:security_information_manager	symantec security information manager	eq	4.8.0
symantec:security_information_manager_appliance	symantec security information manager appliance	eq	-