SID 1:51031

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Symantec Endpoint Protection cross site scripting attempt

Rule Explanation

This event is generated when an attempt is made to target one of the multiple Symantec Endpoint Protection cross site scripting vulnerabilities in the applications console interface. Impact: Web Application Attack Details: Multiple Cross Site Scripting vulnerabilities exists in Symantec Endpoint Protection Manager that would allow attackers the ability to inject arbitrary code against an unknowing victims browser. Ease of Attack: Simple

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group