2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","platforms":["Linux","Windows"],"product":"Email Security","vendor":"SonicWall","versions":[{"status":"affected","version":"10.0.34.8215 and earlier versions"},{"status":"affected","version":"10.0.34.8223 and earlier versions"}]}],"source":"PSIRT@sonicwall.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","matchCriteriaId":"AD63C704-413C-43B7-9475-A19411E3BF6B","versionEndExcluding":"10.0.35.8405","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sonicwall:esa5000:-:*:*:*:*:*:*:*","matchCriteriaId":"91ED89A0-CFFB-44D3-8DE8-64E8DB635872","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa5050:-:*:*:*:*:*:*:*","matchCriteriaId":"69CD3296-0424-46C7-82F1-3BE7892B72C2","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa7000:-:*:*:*:*:*:*:*","matchCriteriaId":"3FE6D8AA-F614-404A-9006-A94763AA23B5","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa7050:-:*:*:*:*:*:*:*","matchCriteriaId":"F748C59C-740B-4F52-9E0D-70F7D4E9AA07","vulnerable":false},{"criteria":"cpe:2.3:h:sonicwall:esa9000:-:*:*:*:*:*:*:*","matchCriteriaId":"7D46ECFF-FA41-4861-A047-1EEFD89D13DD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code."},{"lang":"es","value":"Una vulnerabilidad de cross-site scripting (XSS) almacenada ha sido identificada en el dispositivo SonicWall Email Security debido a la neutralización inadecuada de la entrada proporcionada por el usuario durante la generación de páginas web, permitiendo a un atacante remoto autenticado como usuario administrador ejecutar potencialmente código JavaScript arbitrario."}],"id":"CVE-2026-3468","lastModified":"2026-07-24T20:10:00.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.7,"impactScore":2.7,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-31T20:35:08.592056Z","version":"2.0.3"}}]},"published":"2026-03-31T21:16:32.950","references":[{"source":"PSIRT@sonicwall.com","tags":["Vendor Advisory"],"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0002"}],"sourceIdentifier":"PSIRT@sonicwall.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"PSIRT@sonicwall.com","type":"Secondary"}]}
|