medium4.8Public exploit code
CVE-2019-9701
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject clien…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec DLP 15.5 MP1 - Cross-Site Scripting2019-07-03 · webapps · multiple
Impact
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Data Loss Prevention | Versions 14.0, 14.0.1, 14.0.2, 14.5, 14.6, 15.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153512/Symantec-DLP-15.5-MP1-Cross-Site-Scripting.html
- https://support.symantec.com/us/en/article.SYMSA1484.html
- http://packetstormsecurity.com/files/153512/Symantec-DLP-15.5-MP1-Cross-Site-Scripting.html
- https://support.symantec.com/us/en/article.SYMSA1484.html