VULNERABILITY INTELLIGENCE

CVE-2014-0332

CVSS score4.3 NONE

EPSS probability2.76%

CISA KEVNot currently listed

Published2014-02-14

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.

Weakness classification

nvd@nist.gov: CWE-79

Primary references

cret@cert.org — Broken Link
cret@cert.org — Third Party Advisory, US Government Resource
cret@cert.org — Third Party Advisory, VDB Entry
cret@cert.org — Vendor Advisory
cret@cert.org — VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry