Data Insight

DATE	CVE	VULNERABILITY TITLE	RISK
2014-06-27	CVE-2014-3433	Cross-Site Scripting vulnerability in Symantec Data Insight 3.0/3.0.1/4.0 Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue. network symantec CWE-79	4.3
2014-06-27	CVE-2014-3432	Cross-Site Scripting vulnerability in Symantec Data Insight 3.0/3.0.1/4.0 Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field. network symantec CWE-79	4.3