Lucene search

[email protected]CVE-2012-5316

HistoryOct 08, 2012 - 5:55 p.m.

CVE-2012-5316

2012-10-0817:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-5316

cross-site scripting

xss

barracuda

spam & virus firewall

firmware 4.0.1.009

ldap

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module.

Affected configurations

NVD

Node

barracudanetworksspam_\&_virus_firewall_600_firmwareRange≤4.0.1.009

AND

barracudanetworksspam_\&_virus_firewall_600Match-

CPENameOperatorVersion
barracudanetworks:spam_\&_virus_firewall_600_firmwarebarracudanetworks spam & virus firewall 600 firmwarele4.0.1.009
barracudanetworks:spam_\&_virus_firewall_600barracudanetworks spam & virus firewall 600eq-

CPE	Name	Operator	Version
barracudanetworks:spam_\&_virus_firewall_600_firmware	barracudanetworks spam & virus firewall 600 firmware	le	4.0.1.009
barracudanetworks:spam_\&_virus_firewall_600	barracudanetworks spam & virus firewall 600	eq	-

References

archives.neohapsis.com/archives/bugtraq/2012-01/0130.html

www.securityfocus.com/bid/51599

www.vulnerability-lab.com/get_content.php?id=28

exchange.xforce.ibmcloud.com/vulnerabilities/72579

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

JSON

Related for CVE-2012-5316

nvd1 cvelist1 prion1