XSS in F-Secure Secure Messaging Gateway
CVE-2014-2844
Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.
Affected products
- F-secure Secure_messaging_secure_gateway — versions 7.5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)