Details of VAR-201401-0573

ID

VAR-201401-0573

CVE

CVE-2013-7318

TITLE

AlgoSec Firewall Analyzer of BusinessFlow/login Vulnerable to cross-site scripting

Trust: 0.8

sources: JVNDB: JVNDB-2013-005949

DESCRIPTION

Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter. AlgoSec Firewall Analyzer (AFA) is a set of firewall analysis solutions from AlgoSec Company in the United States. The solution supports automatic detection of security loopholes in firewall policies

Trust: 1.98

sources: NVD: CVE-2013-7318 // JVNDB: JVNDB-2013-005949 // BID: 80100 // VULHUB: VHN-67320

AFFECTED PRODUCTS

vendor:

algosec

model:

firewall analyzer

scope:

version:

6.4

Trust: 2.7

sources: BID: 80100 // JVNDB: JVNDB-2013-005949 // CNNVD: CNNVD-201401-590 // NVD: CVE-2013-7318

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-7318
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-7318
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201401-590
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-67320
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-7318
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-67320
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-67320 // JVNDB: JVNDB-2013-005949 // CNNVD: CNNVD-201401-590 // NVD: CVE-2013-7318

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.9

sources: VULHUB: VHN-67320 // JVNDB: JVNDB-2013-005949 // NVD: CVE-2013-7318

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201401-590

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201401-590

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-005949

PATCH

title:

AlgoSec Firewall Analyzer

url:

http://www.algosec.com/en/products_solutions/products/firewall_analyzer

Trust: 0.8

sources: JVNDB: JVNDB-2013-005949

EXTERNAL IDS

db:	NVD	id:	CVE-2013-7318	Trust: 2.8
db:	OSVDB	id:	96807	Trust: 2.5
db:	PACKETSTORM	id:	122899	Trust: 1.7
db:	JVNDB	id:	JVNDB-2013-005949	Trust: 0.8
db:	CNNVD	id:	CNNVD-201401-590	Trust: 0.7
db:	BID	id:	80100	Trust: 0.4
db:	VULHUB	id:	VHN-67320	Trust: 0.1

sources: VULHUB: VHN-67320 // BID: 80100 // JVNDB: JVNDB-2013-005949 // CNNVD: CNNVD-201401-590 // NVD: CVE-2013-7318

REFERENCES

url:	http://www.osvdb.org/96807	Trust: 2.5
url:	http://packetstormsecurity.com/files/122899/algosec64-xss.txt	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-7318	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-7318	Trust: 0.8

sources: VULHUB: VHN-67320 // JVNDB: JVNDB-2013-005949 // CNNVD: CNNVD-201401-590 // NVD: CVE-2013-7318

CREDITS

Unknown

Trust: 0.3

sources: BID: 80100

SOURCES

db:	VULHUB	id:	VHN-67320
db:	BID	id:	80100
db:	JVNDB	id:	JVNDB-2013-005949
db:	CNNVD	id:	CNNVD-201401-590
db:	NVD	id:	CVE-2013-7318

LAST UPDATE DATE

2025-04-11T23:05:33.985000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-67320	date:	2014-08-06T00:00:00
db:	BID	id:	80100	date:	2014-01-29T00:00:00
db:	JVNDB	id:	JVNDB-2013-005949	date:	2014-01-31T00:00:00
db:	CNNVD	id:	CNNVD-201401-590	date:	2014-02-07T00:00:00
db:	NVD	id:	CVE-2013-7318	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-67320	date:	2014-01-29T00:00:00
db:	BID	id:	80100	date:	2014-01-29T00:00:00
db:	JVNDB	id:	JVNDB-2013-005949	date:	2014-01-31T00:00:00
db:	CNNVD	id:	CNNVD-201401-590	date:	2014-01-29T00:00:00
db:	NVD	id:	CVE-2013-7318	date:	2014-01-29T18:55:26.967