CVE-2013-7025

no score yetEPSS 4.3%

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2013-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:analyzer
sonicwall:global_management_system
sonicwall:uma_e5000_firmware

References

http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html
http://osvdb.org/100610
http://seclists.org/fulldisclosure/2013/Dec/32
http://secunia.com/advisories/55923
http://www.exploit-db.com/exploits/30054

Check your stack JSON