Cross-Site Scripting Flaw in Symantec Data Loss Prevention Administration Console
CVE-2014-9230

Currently unrated

Key Information:

Vendor: Symantec
Status: Data Loss Prevention
Vendor: CVE Published:; 28 June 2015

What is CVE-2014-9230?

The administration console of the Enforce Server in Symantec Data Loss Prevention is susceptible to a cross-site scripting (XSS) vulnerability. This flaw allows remote attackers to inject arbitrary web scripts or HTML into the console, potentially compromising the integrity of the application and the security of sensitive data. It is essential for users to apply appropriate updates to safeguard against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch