Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.
📦
global_management_system
Vendor: sonicwall
Actively Exploited
0
CISA KEV List
PoC / Exploits
5
Code Available
Total RCEs
6
Remote Access
Total CVEs
43
Total Indexed
Avg. EPSS
20.62%
Exploit Prob.
Security Vulnerability Index
Page 4 / 5
4.3
CVSS
Severity: MEDIUM
3.5
CVSS
CVE-2013-7025
Exploit Found
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
Severity: LOW