CVE-2014-2844: XSS

Published Apr 18, 2014

Updated

Cross-site scripting (XSS) vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin.

Affected Software

1 affected component

F-Secure Secure Messaging Secure Gateway=7.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade F-Secure Messaging Secure Gateway to a version that resolves this vulnerability.
Fixed in 7.5.0Patch Patch 1862

Event History

Apr 18, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2844?

CVE-2014-2844 has a moderate severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2014-2844?

To fix CVE-2014-2844, it is recommended to apply Patch 1862 for F-Secure Messaging Secure Gateway version 7.5.0.

Who is affected by CVE-2014-2844?

CVE-2014-2844 affects remote authenticated administrators using F-Secure Messaging Secure Gateway version 7.5.0.

What type of vulnerability is CVE-2014-2844?

CVE-2014-2844 is a cross-site scripting (XSS) vulnerability that allows script injection.

What can attackers do with CVE-2014-2844?

Attackers can exploit CVE-2014-2844 to inject arbitrary web scripts or HTML into the application.