CVE-2013-1611 — Cross-site Scripting in Brightmail Gateway

CWE-79 — Cross-site Scripting4 documents4 sources

Severity

3.5LOWNVD

EPSS

0.3%

top 48.55%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Symantec Brightmail Gateway

Timeline

PublishedMay 9

Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9.5.x allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDsymantec/brightmail_gateway9.5, 9.5.1+1

🔴Vulnerability Details

GHSA

GHSA-338h-j3mx-wmr4: Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9↗2022-05-17

▶

CVEList

CVE-2013-1611: Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9↗2013-05-09

▶

💥Exploits & PoCs

Exploit-DB

Good for Enterprise 2.2.2.1611 - Cross-Site Scripting↗2013-09-25

▶