Lucene search

K
cve[email protected]CVE-2007-5562
HistoryOct 18, 2007 - 8:17 p.m.

CVE-2007-5562

2007-10-1820:17:00
CWE-79
web.nvd.nist.gov
24
cve-2007-5562
cross-site scripting
xss
netgear
ssl312
vpn concentrator

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.6%

Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page.

Affected configurations

NVD
Node
netgearssl312
CPENameOperatorVersion
netgear:ssl312netgear ssl312eq*

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.6%

Related for CVE-2007-5562