[email protected]CVE-2007-5979

HistoryNov 15, 2007 - 12:46 a.m.

CVE-2007-5979

2007-11-1500:46:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2007-5979

cross-site scripting

xss

f5 firepass

ssl vpn

security vulnerability

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

77.8%

JSON

Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.

CPENameOperatorVersion
f5:firepass_4100f5 firepass 4100eq5.4.7
f5:firepass_4100f5 firepass 4100eq5.4.3
f5:firepass_4100f5 firepass 4100eq5.4.1
f5:firepass_4100f5 firepass 4100eq5.4.6
f5:firepass_4100f5 firepass 4100eq5.4
f5:firepass_4100f5 firepass 4100eq5.4.4
f5:firepass_4100f5 firepass 4100eq5.4.9
f5:firepass_4100f5 firepass 4100eq5.4.8
f5:firepass_4100f5 firepass 4100eq5.5.1
f5:firepass_4100f5 firepass 4100eq6.0

CPE	Name	Operator	Version
f5:firepass_4100	f5 firepass 4100	eq	5.4.7
f5:firepass_4100	f5 firepass 4100	eq	5.4.3
f5:firepass_4100	f5 firepass 4100	eq	5.4.1
f5:firepass_4100	f5 firepass 4100	eq	5.4.6
f5:firepass_4100	f5 firepass 4100	eq	5.4
f5:firepass_4100	f5 firepass 4100	eq	5.4.4
f5:firepass_4100	f5 firepass 4100	eq	5.4.9
f5:firepass_4100	f5 firepass 4100	eq	5.4.8
f5:firepass_4100	f5 firepass 4100	eq	5.5.1
f5:firepass_4100	f5 firepass 4100	eq	6.0

Rows per page:

1-10 of 141

References

osvdb.org/38665

secunia.com/advisories/27647

securityreason.com/securityalert/3364

www.procheckup.com/Vulnerability_PR07-13.php

www.securityfocus.com/archive/1/483601/100/0/threaded

www.securityfocus.com/bid/26412

www.securitytracker.com/id?1018937

www.vupen.com/english/advisories/2007/3847

exchange.xforce.ibmcloud.com/vulnerabilities/38439

support.f5.com/kb/en-us/solutions/public/7000/400/sol7498.html

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

77.8%

JSON

Related for CVE-2007-5979

prion1 cvelist1