VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 28, 2015· Updated Jun 17, 2026

CVE-2014-9230

CVE-2014-9230

Description

Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

2
  • Symantec/Data Loss Prevention2 versions
    cpe:2.3:a:symantec:data_loss_prevention:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:data_loss_prevention:*:*:*:*:*:*:*:*range: <=12.5.1
    • (no CPE)range: <=12.5.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.