CVE

Id
32754  
CVE No.
CVE-2008-2637  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the sql_matchscope parameter in vdesk/admincon/index.php.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354453 32754 CVE-2008-2637 BUGTRAQ:20080605 F5 FirePass Content Inspection Management XSS  View
354454 32754 CVE-2008-2637 URL:http://www.securityfocus.com/archive/1/archive/1/493149/100/0/threaded  View
354455 32754 CVE-2008-2637 BID:29574  View
354456 32754 CVE-2008-2637 URL:http://www.securityfocus.com/bid/29574  View
354457 32754 CVE-2008-2637 VUPEN:ADV-2008-1765  View
354458 32754 CVE-2008-2637 URL:http://www.vupen.com/english/advisories/2008/1765/references  View
354459 32754 CVE-2008-2637 SECTRACK:1020205  View
354460 32754 CVE-2008-2637 URL:http://www.securitytracker.com/id?1020205  View
354461 32754 CVE-2008-2637 SECUNIA:30550  View
354462 32754 CVE-2008-2637 URL:http://secunia.com/advisories/30550  View
354463 32754 CVE-2008-2637 SREASON:3931  View
354464 32754 CVE-2008-2637 URL:http://securityreason.com/securityalert/3931  View
354465 32754 CVE-2008-2637 XF:firepass-webyfiers-index-xss(42884)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46159 JVNDB-2008-001469 Adobe Reader および Adobe Acrobat の JavaScript メソッドに入力値を適切に処理できない脆弱性 Adobe Reader および Adobe Acrobat の JavaScript メソッドには入力値を適切に処理できない脆弱性が存在します。結果として任意のコードを実行される可能性があります。 CVE-2008-2641 32754 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001469.html  View