PT-2014-2904

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.1-b86 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO. Recommendations For AlgoSec Firewall Analyzer version...

PT-2014-3360

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the BusinessFlow/login endpoint. Recommendations For AlgoS...

CVE-2013-5092: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-7318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

AlgoSec Firewall Analyzer 6.4 Cross Site Scripting

================================================================================================================================================================ AlgoSec Firewall Analyzer Version v6.4 cross-site scripting XSS Vulnerability...

AlgoSec Firewall Analyzer - Cross-Site Scripting

AlgoSec Firewall Analyzer - Cross-Site Scripting source: https://www.securityfocus.com/bid/61733/info AlgoSec Firewall Analyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

AlgoSec Firewall Analyzer - Cross-Site Scripting

source: https://www.securityfocus.com/bid/61733/info AlgoSec Firewall Analyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

AlgoSec Firewall Analyzer 6.1-b86 Cross Site Scripting

AlgoSec Firewall Analyzer Version v6.1-b86 cross-site scripting XSS Vulnerability ================================================================================================================================================================ AlgoSec Firewall Analyzer Version v6.1-b86 cross-site...

CVE-2012-4889

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

CVE-2012-4891

The CVE-2012-4891 entry describes a Cross-site scripting (XSS) vulnerability in ManageEngine Firewall Analyzer 7.2, impacting the fw/index2.do endpoint via the url parameter. This is a distinct vector from CVE-2012-4889. The NVD notes a MEDIUM severity with a CVSS v2 base score of 4.3 (NETWORK, l...

CVE-2012-4889

ManageEngine Firewall Analyzer 7.2 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary JavaScript/HTML through parameters such as subTab/tab to createAnomaly.do; url/subTab/tab to mindex.do; tab to index2.do; and port to syslog...

CVE-2012-4889

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

CVE-2012-4891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2012-4889: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

PT-2012-5640

Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer version 7.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the url parameter in the fw/index2.do endpoint. This is a different attack...

PT-2012-5638

Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer version 7.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved by manipulating specific parameters ...

ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities

Title: ====== ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=437 VL-ID: ===== 437 Introduction: ============= ManageEngine® Firewall Analyzer is a web based tool for change management,...

ME Firewall Analyzer 7.2 Cross Site Scripting

Title: ====== ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=437 VL-ID: ===== 437 Introduction: ============= ManageEngine® Firewall Analyzer is a web based tool for change management,...

ManageEngine Firewall Analyzer 7.2 - fwsyslogViewer.do?port Cross-Site Scripting

ManageEngine Firewall Analyzer 7.2 - fwsyslogViewer.do?port Cross-Site Scripting source: https://www.securityfocus.com/bid/52841/info Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues...