Profense Web Application Firewall Security Vulnerabilities and Issues — Profense Web Application Firewall CVE List

Lucene search

ArmorlogicProfense Web Application Firewall

5 matches found

CVE•added 2009/05/21 2:30 p.m.•37 views

CVE-2009-1593

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.

4.3CVSS5.9AI score0.00226EPSS

CVE•added 2009/05/21 2:30 p.m.•35 views

CVE-2009-1594

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack UR...

7.5CVSS5.9AI score0.00436EPSS

CVE•added 2009/02/10 7:0 a.m.•29 views

CVE-2009-0468

Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) confi...

6.8CVSS7.4AI score0.00123EPSS

CVE•added 2009/02/10 7:0 a.m.•27 views

CVE-2009-0467

Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.

4.3CVSS5.9AI score0.01346EPSS

CVE•added 2009/05/21 3:30 p.m.•24 views

CVE-2009-1745

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.

10CVSS7AI score0.00757EPSS