{"api_version":"1","generated_at":"2026-07-23T20:19:46+00:00","cve":"CVE-2013-7025","urls":{"html":"https://cve.report/CVE-2013-7025","api":"https://cve.report/api/cve/CVE-2013-7025.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-7025","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-7025"},"summary":{"title":"CVE-2013-7025","description":"Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-12-09 16:36:50","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"3.5","severity":"","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.vulnerability-lab.com/get_content.php?id=1099","name":"http://www.vulnerability-lab.com/get_content.php?id=1099","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"403 Forbidden","mime":"text/plain","httpstatus":"403","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89462","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89462","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/30054","name":"http://www.exploit-db.com/exploits/30054","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Sonicwall GMS 7.x - Filter Bypass & Persistent Vulnerability (0Day)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1029433","name":"http://www.securitytracker.com/id/1029433","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SonicWALL GMS/Analyzer/UMA Input Validation Flaw in 'Alert Settings' Request Permits Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/100610","name":"http://osvdb.org/100610","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/55923","name":"http://secunia.com/advisories/55923","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Security Advisory SA55923 - SonicWALL Multiple Products Two Script Insertion Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2013/Dec/32","name":"http://seclists.org/fulldisclosure/2013/Dec/32","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"],"title":"Full Disclosure: Sonicwall GMS v7.x - Filter Bypass & Persistent\tVulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf","name":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Page Not Found","mime":"application/pdf","httpstatus":"404","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html","name":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/64103","name":"http://www.securityfocus.com/bid/64103","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Multiple Dell SonicWALL Products Multiple HTML Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-7025","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7025","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"analyzer","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"analyzer","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"analyzer","cpe6":"7.1","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"global_management_system","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"global_management_system","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sonicwall","cpe5":"global_management_system","cpe6":"7.1","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"sonicwall","cpe5":"uma_e5000","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sonicwall","cpe5":"uma_e5000_firmware","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sonicwall","cpe5":"uma_e5000_firmware","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"7025","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"sonicwall","cpe5":"uma_e5000_firmware","cpe6":"7.1","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2013","cve_id":"7025","cve":"CVE-2013-7025","epss":"0.031040000","percentile":"0.868520000","score_date":"2026-04-29","updated_at":"2026-04-30 00:13:22"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:53:45.862Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html"},{"name":"55923","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/55923"},{"name":"sonicwall-ematstaticalerttypes-xss(89462)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89462"},{"name":"100610","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/100610"},{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2013/Dec/32"},{"name":"64103","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/64103"},{"name":"1029433","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1029433"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf"},{"name":"30054","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/30054"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.vulnerability-lab.com/get_content.php?id=1099"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-11-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html"},{"name":"55923","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/55923"},{"name":"sonicwall-ematstaticalerttypes-xss(89462)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89462"},{"name":"100610","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/100610"},{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2013/Dec/32"},{"name":"64103","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/64103"},{"name":"1029433","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1029433"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf"},{"name":"30054","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/30054"},{"tags":["x_refsource_MISC"],"url":"http://www.vulnerability-lab.com/get_content.php?id=1099"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-7025","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability (0Day)","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html"},{"name":"55923","refsource":"SECUNIA","url":"http://secunia.com/advisories/55923"},{"name":"sonicwall-ematstaticalerttypes-xss(89462)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89462"},{"name":"100610","refsource":"OSVDB","url":"http://osvdb.org/100610"},{"name":"20131205 Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2013/Dec/32"},{"name":"64103","refsource":"BID","url":"http://www.securityfocus.com/bid/64103"},{"name":"1029433","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1029433"},{"name":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf","refsource":"CONFIRM","url":"http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf"},{"name":"30054","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/30054"},{"name":"http://www.vulnerability-lab.com/get_content.php?id=1099","refsource":"MISC","url":"http://www.vulnerability-lab.com/get_content.php?id=1099"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-7025","datePublished":"2013-12-09T11:00:00.000Z","dateReserved":"2013-12-08T00:00:00.000Z","dateUpdated":"2024-08-06T17:53:45.862Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-12-09 16:36:50","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analyzer:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7A9ABA5C-59AF-496A-B22E-0C88892EC8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analyzer:7.1:*:*:*:*:*:*:*","matchCriteriaId":"8078DCDB-FC88-41C8-BE14-688B5F4911E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:analyzer:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"19E54EA9-F9F8-47FA-9F31-C05C2AE59539"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:7.0:*:*:*:*:*:*:*","matchCriteriaId":"CEF95BB8-DF0B-4131-8A89-82DE559CC09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:7.1:*:*:*:*:*:*:*","matchCriteriaId":"AF555F86-D3E0-4763-9E9A-C26D5C986FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:global_management_system:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"418595FE-EBFA-4B1D-A479-171BBD56279A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:uma_e5000_firmware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"907AFD7C-F904-47AC-937E-4CCDB5E4CEFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:uma_e5000_firmware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"93D89B14-232D-4112-94B7-7757A3BBDD42"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:uma_e5000_firmware:7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"66B20FAD-1131-4C68-BA4D-8B1A20C1DF91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:uma_e5000:-:*:*:*:*:*:*:*","matchCriteriaId":"D8F6C2F1-8C1A-4BAD-8F49-464258B09354"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"7025","Ordinal":"1","Title":"CVE-2013-7025","CVE":"CVE-2013-7025","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"7025","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.","Type":"Description","Title":"CVE-2013-7025"},{"CveYear":"2013","CveId":"7025","Ordinal":"2","NoteData":"2013-12-09","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"7025","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}