CVE-2004-0347: XSS

Published Sep 1, 2004

Updated

Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter.

Affected Software

1 affected component

Netscreen NetScreen-SA 5000 Series

Remediation

Patch Available

http://www.securityfocus.com/bid/9791

Event History

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0347?

The severity of CVE-2004-0347 is considered to be medium due to the potential for unauthorized script execution.

How do I fix CVE-2004-0347?

To fix CVE-2004-0347, update the firmware of the NetScreen-SA 5000 Series to a version that addresses this vulnerability.

Who is affected by CVE-2004-0347?

CVE-2004-0347 affects remote authenticated users of the NetScreen-SA 5000 Series running firmware 3.3 Patch 1.

What type of vulnerability is CVE-2004-0347?

CVE-2004-0347 is a Cross-site scripting (XSS) vulnerability that allows execution of arbitrary scripts.

Can CVE-2004-0347 be exploited by any user?

No, CVE-2004-0347 can only be exploited by authenticated users of the affected system.