CVE-2014-2589

Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.

• CWE-79

• http://secunia.com/advisories/57275Vendor Advisory
• http://www.osvdb.org/104089Broken Link
• http://www.securityfocus.com/archive/1/531364/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/66042Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029884Third Party Advisory, VDB Entry
• http://www.vulnerability-lab.com/get_content.php?id=1100Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91766VDB Entry
• http://secunia.com/advisories/57275Vendor Advisory
• http://www.osvdb.org/104089Broken Link
• http://www.securityfocus.com/archive/1/531364/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/66042Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029884Third Party Advisory, VDB Entry
• http://www.vulnerability-lab.com/get_content.php?id=1100Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91766VDB Entry

Published

Mar 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2581Smb4K before 1.1.1 allows remote attackers to obtain credent…7.5
• CVE-2014-2583Multiple directory traversal vulnerabilities in pam_timestam…
• CVE-2014-2585ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_e…
• CVE-2014-2586Cross-site scripting (XSS) vulnerability in the login audit …
• CVE-2014-2587SQL injection vulnerability in jsp/reports/ReportsAudit.jsp …
• CVE-2014-2588Directory traversal vulnerability in servlet/downloadReport …
• CVE-2014-2590The web management interface in Siemens RuggedCom ROS before…
• CVE-2014-2591Untrusted search path vulnerability in BMC Patrol for AIX 3.…
• CVE-2014-2592Unrestricted file upload vulnerability in Aruba Web Manageme…
• CVE-2014-2593The management console in Aruba Networks ClearPass Policy Ma…
• CVE-2014-2595Barracuda Web Application Firewall (WAF) 7.8.1.013 allows re…9.8
• CVE-2014-2597PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users …