rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-12188 
Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12189 
Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12190 
Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12191 
Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12192 
Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12193 
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel QuickAssit Technology for Linux
Published: 2018-10-10T18:00:00.000Z
CVE-2018-12196 
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12198 
Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12199 
Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12200 
Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12201 
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.
Problem types: description: Escalation of privilege
Affected products: vendor: Intel Corporation
product: Intel Platform Sample / Silicon Reference firmware
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12202 
Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.
Problem types: description: Escalation of privilege
Affected products: vendor: Intel Corporation
product: Intel Platform Sample / Silicon Reference firmware
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12203 
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.
Problem types: description: Escalation of privilege
Affected products: vendor: Intel Corporation
product: Intel Platform Sample / Silicon Reference firmware
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12204 
Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially enable an escalation of privilege via local access.
Problem types: description: Escalation of privilege
Affected products: vendor: Intel Corporation
product: Intel Platform Sample / Silicon Reference firmware
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12205 
Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generation Intel(R) Core(tm) Processor may allow an unauthenticated user to potentially enable an escalation of privilege via physical access.
Problem types: description: Escalation of privilege
Affected products: vendor: Intel Corporation
product: Intel Platform Sample / Silicon Reference firmware
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12206 
Improper configuration of hardware access in Intel QuickAssist Technology for Linux (all versions) may allow an authenticated user to potentially enable a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel QuickAssist Technology for Linux
Published: 2018-12-13T23:00:00.000Z
CVE-2018-12207 
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: 2019.2 IPU – Intel(R) Processor Machine Check Error
Published: 2019-11-14T19:08:45.000Z
CVE-2018-12208 
Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12209 
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12210 
Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12211 
Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12212 
Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12213 
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12214 
Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12215 
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.
Problem types: description: Denial of Service
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12216 
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12217 
Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to read device configuration information via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12218 
Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a memory leak via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12219 
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12220 
Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12221 
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12222 
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12223 
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.
Problem types: description: Escalation of Privilege
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12224 
Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
Affected products: vendor: Intel Corporation
product: Intel(R) Graphics Driver for Windows
Published: 2019-03-14T20:00:00.000Z
CVE-2018-12227 
An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert before 13.21-cert2. When endpoint specific ACL rules block a SIP request, they respond with a 403 forbidden. However, if an endpoint is not identified, then a 401 unauthorized response is sent. This vulnerability just discloses which requests hit a defined endpoint. The ACL rules cannot be bypassed to gain access to the disclosed endpoints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T04:00:00.000Z
CVE-2018-12228 
An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a specially crafted message, then Asterisk gets caught in an infinite loop while trying to read the data stream. This renders the system unusable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T04:00:00.000Z
CVE-2018-12229 
Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter (aka the By Author field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T11:00:00.000Z
CVE-2018-12230 
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin (RMC), an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-10T11:00:00.000Z
CVE-2018-12232 
In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat does not increment the file descriptor reference count, which allows close to set the socket to NULL during fchownat's execution, leading to a NULL pointer dereference and system crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T12:00:00.000Z
CVE-2018-12233 
In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two different extended attribute names on the same file. This vulnerability can be triggered by an unprivileged user with the ability to create files and execute programs. A kmalloc call is incorrect, leading to slab-out-of-bounds in jfs_xattr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-12T12:00:00.000Z
CVE-2018-12234 
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-06T23:00:00.000Z
CVE-2018-12237 
The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges.
Problem types: description: OS command injection
Affected products: vendor: Symantec Corporation
product: Symantec Reporter
Published: 2019-01-24T21:00:00.000Z
CVE-2018-12238 
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
Problem types: description: AV Bypass
Affected products: vendor: Symantec Corporation
product: Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud)
Published: 2018-11-29T14:00:00.000Z
CVE-2018-12239 
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
Problem types: description: AV Bypass
Affected products: vendor: Symantec Corporation
product: Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud)
Published: 2018-11-29T14:00:00.000Z
CVE-2018-12240 
The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likelihood of encrypted data being recovered without adequate credentials.
Problem types: description: Privilege Escalation
Affected products: vendor: Symantec Corporation
product: Norton Identity Safe for Android
Published: 2018-08-29T20:00:00.000Z
CVE-2018-12241 
The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious JavaScript code into the SA web UI client application.
Problem types: description: Cross-site scripting
Affected products: vendor: Symantec Corporation
product: Symantec Security Analytics (SA)
Published: 2018-11-27T18:00:00.000Z