Security Advisory

CVE-2013-4674

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-07-31 10:00:00
Last updated 2024-08-06 16:52:26
Assigner symantec
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment.