NetSight
medium6.1

CVE-2014-6189

Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Mod…

Impact

Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Models-Hotfix-FP0008 and 5.3 before 5.3.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffected versions
IbmSecurity Network Protection 4100 Firmware
Versions 5.2, 5.3
IbmSecurity Network Protection 3100 Firmware
Versions 5.2, 5.3
IbmSecurity Network Protection 5100 Firmware
Versions 5.2, 5.3
IbmSecurity Network Protection 7100 Firmware
Versions 5.2, 5.3

Weakness classification

References