Unscored severity · published Dec 9, 2013
CVE-2013-7025
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Analyzer · Sonicwall
7.0; 7.1; 7.1 · source: NVD
GM
Global Management System · Sonicwall
7.0; 7.1; 7.1 · source: NVD
UE
Uma E5000 Firmware · Sonicwall
7.0; 7.1; 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7025
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7025
Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html
Broken Link
http://osvdb.org/100610
Exploit
http://seclists.org/fulldisclosure/2013/Dec/32
Third Party Advisory
http://secunia.com/advisories/55923
Exploit
http://www.exploit-db.com/exploits/30054
Exploit
http://www.securityfocus.com/bid/64103
More from Analyzer
9.9
CVE-2016-2396
The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute…
9.8
CVE-2013-1359
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1,…
9.8
CVE-2013-1360
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1,…
9.8
CVE-2016-2397
The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary…
5.4
CVE-2018-5691
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module