CVE-2014-0338
Published Mar 16, 2014
Last updated 9 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the pol_name parameter.
- Source
- cret@cert.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0E767E4-A244-435C-921F-702704BF85E1",
"versionEndIncluding": "11.8.1"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCE69206-3250-491D-96DE-464D7ECD8C89"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "278F550E-F595-496B-80DC-62BF67378E66"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F14FDC93-9DB2-4673-88EE-4BA3748D2C51"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8694387F-BCB1-4699-8A9B-4CB2974D5834"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C1B8F8C-04BA-4DE2-A59C-559C1B596E9A"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70BC26F4-53B5-48C9-A725-C2614ABAEE7D"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67DC54BF-0714-4070-A9BC-4BB65EA9B7BF"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFF243AF-4B53-4209-B262-282139B485E0"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4065A79A-C655-4AF4-9F13-42855C339E28"
},
{
"criteria": "cpe:2.3:o:watchguard:fireware:11.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6052D128-0801-4F3E-A5B7-4AF82AEEF643"
}
],
"operator": "OR"
}
]
}
]