CVE-2023-46964

Description

Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.

Reserved 2023-10-30 | Published 2023-11-04 | Updated 2024-09-05 | Assigner Hillstone

Problem types

Cross Site Scripting (XSS)

Product status

Version 5.5
affected

References

foremost-smash-52a.notion.site/...91e7ed4795adb1d89d75030d16

cve.org (CVE-2023-46964)

nvd.nist.gov (CVE-2023-46964)

Download JSON