Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Superscout_email_filter | Surfcontrol | 3.5 (including) | 3.5 (including) |
| Superscout_email_filter | Surfcontrol | 3.5.1 (including) | 3.5.1 (including) |
| Superscout_email_filter | Surfcontrol | 4.0 (including) | 4.0 (including) |