Sophos Cyberoam Cross-Site Scripting Vulnerability in Multiple Products

Sophos Cyberoam UTM and NGFW appliances are unified threat management and next-generation firewall products. Cross-site scripting vulnerabilities exist in multiple Sophos Cyberoam products, which can be exploited by remote attackers to inject arbitrary web script or HTML...

PT-2012-4669 · Cyberoam · Cyberoam Utm

Name of the Vulnerable Software and Affected Versions: Cyberoam UTM appliances affected versions not specified Description: The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations. This...