CVE-2014-5024

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.63%

Published

Jul 24, 2014

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter.

Weaknesses (CWE)

CWE-79

Affected Products (3)

sonicwall · analyzervulnerable

sonicwall · global_management_systemvulnerable

sonicwall · uma_em5000vulnerable

References (10)

http://packetstormsecurity.com/files/127575/SonicWALL-GMS-7.2-Build-7221.1701-Cross-Site-Scripting.html

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2014/Jul/125

ExploitMailing ListThird Party Advisory

http://secunia.com/advisories/60287

Third Party Advisory

http://www.securityfocus.com/bid/68829

ExploitThird Party AdvisoryVDB Entry

https://support.software.dell.com/product-notification/128245

Vendor Advisory

http://packetstormsecurity.com/files/127575/SonicWALL-GMS-7.2-Build-7221.1701-Cross-Site-Scripting.html

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2014/Jul/125

ExploitMailing ListThird Party Advisory

http://secunia.com/advisories/60287

Third Party Advisory

http://www.securityfocus.com/bid/68829

ExploitThird Party AdvisoryVDB Entry

https://support.software.dell.com/product-notification/128245

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs