CVE-2012-4983

The CVE-2012-4983 issue affects Forescout CounterACT/NAC devices, with XSS vulnerabilities on the login page via the a parameter and on the rangesearch query, allowing arbitrary script injection. It applies to versions prior to 7.0 (notably seen in 6.3.4.1). Impact includes potential redirection ...

CVE-2012-4982: Improper Input Validation

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter...

PT-2012-5703

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device versions prior to 7.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...

PT-2012-5702

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device versions prior to 7.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter in the assets/login endpoint. Recommendation...

CVE-2012-4983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the a parameter to assets/login or 2 the query parameter to assets/rangesearch...