This host is installed with Symantec IM Manager and is prone to Cross Site Scripting vulnerability.

Successful exploitation allows attackers to execute arbitrary script code. Impact Level: Application

Update to Symantec IM Manager version 8.4.13 For updates refer to http://www.symantec.com/business/im-manager

The flaw is caused due input validation error in the 'management console', which fails to properly filter/validate external input from non-privileged users with authorized access to the console.

Symantec IM Manager version 8.3 and 8.4 before 8.4.13

• http://secunia.com/advisories/38672
• http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100218_00
• http://www.vupen.com/english/advisories/2010/0438

---

Updated on 2015-03-25