Armorlogic Profense Web Application Firewall multiple security vulnerabilities

Protection bypass, static default password...

Cross site scripting

Cross-site scripting XSS vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a denylog manage action...