CVE-2014-9230: XSS
Published Jun 28, 2015
·Updated
Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
Symantec Data Loss Prevention<=12.5.1
Event History
Jun 28, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9230?
CVE-2014-9230 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-9230?
To fix CVE-2014-9230, upgrade to Symantec Data Loss Prevention version 12.5.2 or later.
3
What is affected by CVE-2014-9230?
CVE-2014-9230 affects the administration console in the Enforce Server of Symantec Data Loss Prevention versions prior to 12.5.2.
4
What type of vulnerability is CVE-2014-9230?
CVE-2014-9230 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2014-9230 be exploited remotely?
Yes, CVE-2014-9230 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.