{"id":"CVE-2014-3432","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML vi","description":"Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.","publishedAt":"2014-06-27T14:00:00.000Z","updatedAt":"2024-08-06T10:43:06.471Z","severity":null,"assigner":"symantec","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/68160","http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00","http://secunia.com/advisories/59561","http://secunia.com/advisories/59538","http://www.securitytracker.com/id/1030472"],"weaknesses":[],"ingestedAt":"2026-10-29T19:41:17.924Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/3xxx/CVE-2014-3432.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-3432","state":"PUBLISHED","datePublished":"2014-06-27T14:00:00.000Z","dateUpdated":"2024-08-06T10:43:06.471Z","assignerShortName":"symantec","assignerOrgId":"80d3bcb6-88de-48c2-a47e-aebf795f19b5","dateReserved":"2014-05-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/68160","name":"68160","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/59561","name":"59561","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/59538","name":"59538","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securitytracker.com/id/1030472","name":"1030472","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"symantec","dateUpdated":"2014-07-22T19:57:01.000Z","orgId":"80d3bcb6-88de-48c2-a47e-aebf795f19b5"},"datePublic":"2014-06-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@symantec.com","ID":"CVE-2014-3432","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"68160","refsource":"BID","url":"http://www.securityfocus.com/bid/68160"},{"name":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00","refsource":"CONFIRM","url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00"},{"name":"59561","refsource":"SECUNIA","url":"http://secunia.com/advisories/59561"},{"name":"59538","refsource":"SECUNIA","url":"http://secunia.com/advisories/59538"},{"name":"1030472","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1030472"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/68160","name":"68160","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140625_00","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/59561","name":"59561","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/59538","name":"59538","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securitytracker.com/id/1030472","name":"1030472","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T10:43:06.471Z"}}]}}}