Signature Detail
Short Name |
SSL:VULN:SYMANTEC-EP-PARAM-XSS |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SSL |
Keywords |
Symantec Endpoint Protection URI Parameter Reflected Cross-Site Scripting |
Release Date |
2014/11/24 |
Update Number |
2444 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SSL: Symantec Endpoint Protection URI Parameter Reflected Cross-Site Scripting
This signature detect attempts to exploit a known vulnerability against Symantec Endpoint Protection Manager. The vulnerability is due to insufficient validation of user input before it is sent back to the user. A remote unauthenticated attacker may exploit this vulnerability to execute arbitrary script code in the context of the the current browser session.
References
- CVE: CVE-2014-3438