Cross site scripting

2012-06-1315:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.

CPENameOperatorVersion
network_sentry_applianceeq500.0.0-rx-ns
network_sentry_applianceeq500.0.0-x-ns
network_sentry_appliance_softwarele5.3

Name	Operator	Version
network_sentry_appliance	eq	500.0.0-rx-ns
network_sentry_appliance	eq	500.0.0-x-ns
network_sentry_appliance_software	le	5.3

References

www.kb.cert.org/vuls/id/709939

www.kb.cert.org/vuls/id/MAPG-8TJKAF

na3.salesforce.com/sfc/