Is CVE-2013-7025 being actively exploited?

CVE-2013-7025 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2013-7025?

CVE-2013-7025 has a CVSS 2.0 base score of 3.5 (LOW).

CVE-2013-7025

LOW · CVSS 3.5EPSS 4.3%EU EUVD

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

Key facts

CVSS score: 3.5 (v2.0)
Severity: LOW
CVSS vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness (CWE): CWE-79
EPSS score: 4.3% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2013-6826)
Published: December 9, 2013
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-6826 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

sonicwall / analyzer
sonicwall / analyzer
sonicwall / analyzer
sonicwall / global management system
sonicwall / global management system
sonicwall / global management system
sonicwall / uma e5000
sonicwall / uma e5000 firmware
sonicwall / uma e5000 firmware
sonicwall / uma e5000 firmware

References

http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html(Third Party Advisory)
http://osvdb.org/100610(Broken Link)
http://seclists.org/fulldisclosure/2013/Dec/32(Exploit, Mailing List, Third Party Advisory)
http://secunia.com/advisories/55923(Third Party Advisory)
http://www.exploit-db.com/exploits/30054(Exploit, Third Party Advisory, VDB Entry)
http://www.securityfocus.com/bid/64103(Exploit, Third Party Advisory, VDB Entry)
http://www.securitytracker.com/id/1029433(Third Party Advisory, VDB Entry)
http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf(Vendor Advisory)
http://www.vulnerability-lab.com/get_content.php?id=1099(Exploit)
https://exchange.xforce.ibmcloud.com/vulnerabilities/89462(VDB Entry)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain