PT-2013-5737 · Oracle+1 · Webcenter+2

Publicado 2013-10-19 · Atualizado 2013-10-21 · CVE-2013-5702

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 11.8 WatchGuard WSM versions prior to 11.8

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in WebCenter. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Recommendations For WatchGuard Fireware versions prior to 11.8, update to version 11.8 or later. For WatchGuard WSM versions prior to 11.8, update to version 11.8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-5702

Produtos afetados

Watchguard Fireware

Watchguard Wsm

Webcenter

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-5702 · Nota de Segurança
• http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes · Aviso do Fabricante
• http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8 · Nota