Unscored severity · published Mar 18, 2014
CVE-2013-2643
Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter in an allow action to rss.php, (2) msg parameter to end-user/errdoc.php, (3) h parameter to end-user/ftp_redirect.php, or (4) threat parameter to the Blocked component.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Web Appliance · Sophos
All versions, or not specified · source: NVD
WA
Web Appliance Firmware · Sophos
through 3.7.8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2643
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2643
Vendor Advisory
http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
Exploit
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt
More from Web Appliance
9.8
CVE-2023-1671
Sophos Web Appliance Command Injection Vulnerability
9.8
CVE-2017-6182
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka…
8.1
CVE-2017-6412
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310
7.2
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code
7.2
CVE-2017-6183
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote…