Live › vulnerability › CVE-2015-20130
Netsweeper's web admin page view_server_log.php reflects the log parameter into its HTML without encoding it. A remote attacker who tricks an administrator into opening a crafted link can run JavaScript in that administrator's browser session on the Netsweeper admin interface.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 15:31 UTC. All times on this page are UTC.
Organisations that run the Netsweeper web filter with its web administration interface reachable to staff or the internet. The exposure is through the admin UI, so the risk is highest where administrators browse from the same network or can be sent a link. Installations on patched versions or with the admin interface restricted to trusted hosts are less exposed.
No product ranges from the sources yet.
webadmin/reporter/view_server_log.php on Netsweeper web administration serversunknown for the exact command on your install4.0.x before 4.0.11: move to 4.0.114.1.x before 4.1.5: move to 4.1.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the log request parameter, which is reflected into the HTML response without output encoding. Attackers can craft a malicious URL and induce a user to request it, resulting in arbitrary JavaScript execution within the victim's browser session against the Netsweeper web administration interface. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
This page as .md · .json · in your agent: get_signal("CVE-2015-20130")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.