CVE-2013-7025: sonicwall analyzer Cross-site Scripting
Vulnerability summary
CVE-2013-7025 is a low (CVSS 3.5) Cross-site Scripting vulnerability in sonicwall analyzer. EPSS estimates a 4.34% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 09-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.34%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.34% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (vulnerability-lab.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Sonicwall3 products
- analyzer7.0 | 7.1 | 7.1:sp1
- global_management_system7.0 | 7.1 | 7.1:sp1
- uma_e5000_firmware7.0 | 7.1 | 7.1:sp1
1 vendor · 3 products
References
10 links- archives.neohapsis.com/archives/bugtraq/2013-12/0022.htmlMailing ListX Refsource BUGTRAQThird Party Advisory
- www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdfX Refsource CONFIRMVendor Advisory