CVE-2014-0332

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.

• CWE-79

• http://osvdb.org/103216Broken Link
• http://www.kb.cert.org/vuls/id/727318Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/65498Third Party Advisory, VDB Entry
• http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_XSS_Resolved_in_7.1_SP2_and_7.2.pdfVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91062VDB Entry
• http://osvdb.org/103216Broken Link
• http://www.kb.cert.org/vuls/id/727318Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/65498Third Party Advisory, VDB Entry
• http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_XSS_Resolved_in_7.1_SP2_and_7.2.pdfVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91062VDB Entry

Published

Feb 14, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0326The Pilot Below Deck Equipment (BDE) and OpenPort implementa…
• CVE-2014-0327The Terminal Upgrade Tool in the Pilot Below Deck Equipment …
• CVE-2014-0328The thraneLINK protocol implementation on Cobham devices doe…
• CVE-2014-0329The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a …
• CVE-2014-0330Cross-site scripting (XSS) vulnerability in adminui/user_lis…
• CVE-2014-0331Cross-site scripting (XSS) vulnerability in the web administ…
• CVE-2014-0333The png_push_read_chunk function in pngpread.c in the progre…
• CVE-2014-0334Multiple cross-site scripting (XSS) vulnerabilities in CMS M…
• CVE-2014-0335Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2014-0336Cross-site request forgery (CSRF) vulnerability in the web c…
• CVE-2014-0337Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2014-0338Multiple cross-site scripting (XSS) vulnerabilities in the f…