CVE Feed

    Dashboard / CVE / CVE-2013-7025

    CVE-2013-7025

    Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

    Published:Dec 9, 2013
    Last Modified:Apr 11, 2025
    EPS:Dec 9, 2013
    EPSS Score:0.0202
    CVSS Score:3.5

    Affected Products

    Vendor
    Sonicwall
    Product
    Analyzer
    Vendor
    Sonicwall
    Product
    Global Management System
    Vendor
    Sonicwall
    Product
    Uma E5000
    Vendor
    Sonicwall
    Product
    Uma E5000 Firmware

    Exploits

    http://seclists.org/fulldisclosure/2013/Dec/32http://www.exploit-db.com/exploits/30054http://www.securityfocus.com/bid/64103http://www.vulnerability-lab.com/get_content.php?id=1099http://seclists.org/fulldisclosure/2013/Dec/32http://www.exploit-db.com/exploits/30054http://www.securityfocus.com/bid/64103http://www.vulnerability-lab.com/get_content.php?id=1099https://www.exploit-db.com/exploits/30054

    Related CVEs

    CVE-2013-1359 (CVSS 9.8) — An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4…
    CVE-2013-1360 (CVSS 9.8) — An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, …
    CVE-2018-5691 (CVSS 5.4) — SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeCon…
    CVE-2016-2397 (CVSS 9.8) — The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 1…
    CVE-2016-2396 (CVSS 9.9) — The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 be…
    CVE-2015-3990 (CVSS 9) — The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allow…
    CVE-2014-8420 (CVSS 9) — The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analy…
    CVE-2014-5024 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before …
    CVE-2014-0332 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer …

    References

    http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html
    http://osvdb.org/100610
    http://seclists.org/fulldisclosure/2013/Dec/32
    http://secunia.com/advisories/55923
    http://www.exploit-db.com/exploits/30054
    http://www.securityfocus.com/bid/64103
    http://www.securitytracker.com/id/1029433
    http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf
    http://www.vulnerability-lab.com/get_content.php?id=1099
    https://exchange.xforce.ibmcloud.com/vulnerabilities/89462
    http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html
    http://osvdb.org/100610
    http://seclists.org/fulldisclosure/2013/Dec/32
    http://secunia.com/advisories/55923
    http://www.exploit-db.com/exploits/30054
    http://www.securityfocus.com/bid/64103
    http://www.securitytracker.com/id/1029433
    http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf
    http://www.vulnerability-lab.com/get_content.php?id=1099
    https://exchange.xforce.ibmcloud.com/vulnerabilities/89462

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High