CVE-2014-9430: XSS
Published Dec 31, 2014
·Updated
Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via the COMMENT parameter in an Add action.
Affected Software
1 affected component
Smoothwall Smoothwall=3.0-sp3
Event History
Dec 31, 2014
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9430?
The severity of CVE-2014-9430 is considered to be medium due to its potential for exploitation through cross-site scripting.
2
How do I fix CVE-2014-9430?
To fix CVE-2014-9430, you should update Smoothwall Express to a later version that addresses this vulnerability.
3
What types of attacks are possible with CVE-2014-9430?
CVE-2014-9430 can be exploited to perform cross-site scripting attacks, allowing attackers to inject malicious scripts into web pages.
4
Who is affected by CVE-2014-9430?
Users of Smoothwall Express version 3.0 SP3 are affected by CVE-2014-9430.
5
Is CVE-2014-9430 a recent vulnerability?
CVE-2014-9430 was published in December 2014, therefore it is not a recent vulnerability.