Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
SonicWall SonicOS SSLVPN NACagent 跨站脚本漏洞
Vulnerability Description
SonicWall SonicOS SSLVPN NACagent是美国SonicWall公司的一款VPN（虚拟私人网络）客户端应用程序。 SonicOS SSLVPN web interface 存在跨站脚本漏洞，攻击者可利用该漏洞能够在防火墙SSLVPN门户中存储并可能执行任意的JavaScript代码。以下产品及版本受到影响：5.9.1.7版本，5.9.1.13版本，6.5.4.7版本，6.5.1.12版本，6.0.5.3版本，SonicOSv 6.5.4版本，SonicOS 7.0.0.0版本。
CVSS Information
N/A
Vulnerability Type
N/A