Profense Web Application Firewall@* Security Vulnerabilities and Issues — Profense Web Application Firewall@* CVE List

Lucene search

ArmorlogicProfense Web Application Firewall*

3 matches found

CVE•added 2009/05/21 2:30 p.m.•37 views

CVE-2009-1593

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.

4.3CVSS5.9AI score0.00226EPSS

CVE•added 2009/05/21 2:30 p.m.•35 views

CVE-2009-1594

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack UR...

7.5CVSS5.9AI score0.00436EPSS

CVE•added 2009/05/21 3:30 p.m.•24 views

CVE-2009-1745

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.

10CVSS7AI score0.00757EPSS