NVD

Id
58003  
Name
CVE-2007-5979  
Description
Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-11-14  
Modified Date
2011-03-07  
Seq
2007-5979  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297159 58003 CVE-2007-5979 3364  View
297160 58003 CVE-2007-5979 http://www.procheckup.com/Vulnerability_PR07-13.php  View
297161 58003 CVE-2007-5979 20071112 PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN "download_plugin.php3" server-side script  View
297162 58003 CVE-2007-5979 26412  View
297163 58003 CVE-2007-5979 1018937  View
297164 58003 CVE-2007-5979 ADV-2007-3847  View
297165 58003 CVE-2007-5979 firepass-downloadplugin-xss(38439)  View
297166 58003 CVE-2007-5979 https://support.f5.com/kb/en-us/solutions/public/7000/400/sol7498.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54198 JVNDB-2007-002890 F5 Firepass 4100 SSL VPN の download_plugin.php3 におけるクロスサイトスクリプティングの脆弱性 F5 Firepass 4100 SSL VPN download_plugin.php3 には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5979 29334 CVE-2007-5979 58003 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002890.html 2007-11-14 2012-06-26 View