PT-2012-3570

Name of the Vulnerable Software and Affected Versions ForeScout CounterACT appliance versions 6.3.3.2 through 6.3.4.10 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the status program. These vulnerabilities allow remote attackers to inject arbitrary web scrip...

CVE-2012-1825: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via 1 the loginname parameter in a forgotpass action or 2 the username parameter...