CVE-2014-2589
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp)...
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
- Record
CVE-2014-2589- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
- Record
CVE-2014-2589- Updated
- 2026-11-02
EUVDEUVD-2014-2621 No score
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
- Record
EUVD-2014-2621- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rm2q-3gmp-74fg No score
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp)...
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
- Record
GHSA-rm2q-3gmp-74fg- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2589 is a medium vulnerability (CVSS 4.3) in Sonicwall Nsa 2400, published March 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.41%, the 84th percentile. No source names a fixed version.
References
securitytracker.com/id/1029884
exchange.xforce.ibmcloud.com/vulnerabilities/91766
securityfocus.com/archive/1/531364/100/0/threaded
secunia.com/advisories/57275
vulnerability-lab.com/get_content.php?id=1100
osvdb.org/104089
nvd.nist.gov/vuln/detail/CVE-2014-2589
github.com/advisories/GHSA-rm2q-3gmp-74fg