⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2016-2046

MEDIUM · 6.1 CVSS Gepubliceerd: 17-02-2016 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Vendors

Sophos

Affected products

Unified Threat Management Software

References

packetstormsecurity.com
seclists.org
www.halock.com
www.securitytracker.com