CVE-2018-12241

The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious JavaScript code into the SA web UI client application.

• CWE-79

• http://www.securityfocus.com/bid/105965Third Party Advisory, VDB Entry
• https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1466.htmlVendor Advisory
• http://www.securityfocus.com/bid/105965Third Party Advisory, VDB Entry
• https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1466.htmlVendor Advisory

Published

Nov 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12234A Reflected Cross Site Scripting (XSS) Vulnerability was dis…
• CVE-2018-12237The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 pr…
• CVE-2018-12238Norton prior to 22.15; Symantec Endpoint Protection (SEP) pr…
• CVE-2018-12239Norton prior to 22.15; Symantec Endpoint Protection (SEP) pr…
• CVE-2018-1224Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12240The Norton Identity Safe product prior to 5.3.0.976 may be s…5.9
• CVE-2018-12242The Symantec Messaging Gateway product prior to 10.6.6 may b…
• CVE-2018-12243The Symantec Messaging Gateway product prior to 10.6.6 may b…
• CVE-2018-12244SEP (Mac client) prior to and including 12.1 RU6 MP9 and pri…
• CVE-2018-12245Symantec Endpoint Protection prior to 14.2 MP1 may be suscep…
• CVE-2018-12246Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is suscept…
• CVE-2018-12247An issue was discovered in mruby 1.4.1. There is a NULL poin…