SZB-1d65f46462
Netsweeper reflected XSS in view_server_log.php listed as EUVD-2015-9439
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Netsweeper
- Product
- Netsweeper
- First seen
Summary
The EUVD record EUVD-2015-9439 lists a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 4.0.11 and before 4.1.5, with a CVSS v3.1 score of 5.1. It says remote attackers can run JavaScript by injecting malicious code.
If you use Netsweeper
Upgrade Netsweeper to 4.0.11, 4.1.5, or later
Limit webadmin access to trusted administrators
Check admin console logs for unusual parameter values
What the sources say 1
· Mastodon: “Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability” Source