CVE-2018-12241

MEDIO 6.1CVE-2018-12241 · Published 27/11/2018 · updated 17/06/2026

En resumen

CVE-2018-12241 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a security analytics (symantec).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.00%, mayor que el 62.8% de las vulnerabilidades.
Solución: actualizar a 7.3.4 o posterior.

Package	Affected versions	Patched versions
security analytics symantec	`≥ 7.2.1, < 7.3.4`	`7.3.4`

Description

The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious JavaScript code into the SA web UI client application.

References

securityfocus.com/bid/105965 · Third Party Advisory
support.symantec.com/content/unifiedweb/en_US/article.SYMSA1466.html · Vendor Advisory

Más vulnerabilidades de security analytics

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free