CVE-2012-1825

Multiple cross-site scripting XSS vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via 1 the loginname parameter in a forgotpass action or 2 the username parameter...

CVE-2012-1825

The CVE-2012-1825 entry concerns XSS vulnerabilities in the ForeScout CounterACT appliance (software 6.3.3.2–6.3.4.10) where the status program’s web interface is vulnerable. Specifically, attackers can inject arbitrary script via (1) loginname in a forgotpass action or (2) username, enabling ref...

ForeScout CounterACT reflected XSS vulnerability

Overview The ForeScout CounterACT appliance contains reflected cross-site scripting XSS vulnerabilities. Description The web interface of the ForeScout CounterACT appliance contains reflected XSS vulnerabilities CWE-79. The following are a couple...

Unfixed XSS vulnerability at www.forescout.com

Security researcher wutsec, has submitted on 25/01/2012 a cross-site-scripting XSS vulnerability affecting www.forescout.com, which at the time of submission ranked 718024 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...