PT-2013-5737 · Oracle+1 · Webcenter+2

Published 2013-10-19 · Updated 2013-10-21 · CVE-2013-5702

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 11.8 WatchGuard WSM versions prior to 11.8

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in WebCenter. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Recommendations For WatchGuard Fireware versions prior to 11.8, update to version 11.8 or later. For WatchGuard WSM versions prior to 11.8, update to version 11.8 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-5702

Affected Products

Watchguard Fireware

Watchguard Wsm

Webcenter

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-5702 · Security Note
• http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes · Vendor Advisory
• http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8 · Note