Cross-Site Scripting Flaw in Netsweeper Vulnerable to Remote Exploits
CVE-2014-9608

6.1MEDIUM

Key Information:

Vendor

Netsweeper

Status
Netsweeper
Vendor
CVE Published:
19 February 2020

What is CVE-2014-9608?

A Cross-Site Scripting (XSS) vulnerability exists in Netsweeper's webadmin interface located in group_table_ajax.php. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML into the application through PATH_INFO, potentially compromising user data and affecting web application integrity. This flaw is present in versions prior to 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2, making it crucial for users and administrators to update their software to mitigate this risk.

References

http://packetstormsecurity.com/files/133034/Netsweeper-By...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.