Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
F5Firepass 4100

7 matches found

CVE
CVE•added 2007/06/06 10:0 p.m.•76 views

CVE-2007-3097

FirePass (4100 SSL VPN) my.activation.php3 login page suffers a cross-site scripting (XSS) vulnerability due to insufficient sanitization of URL arguments, enabling attacker-controlled HTML/JavaScript when a user follows a crafted link. F5 advisory SOL6919 states this was fixed in maintenance ver...

7.5CVSS7.6AI score0.02204EPSS
CVE
CVE•added 2008/03/05 11:0 p.m.•68 views

CVE-2007-6704

CVE-2007-6704 is a cross-site scripting vulnerability affecting F5 FirePass SSL VPN 4100/5.x and 6.0.x when pre-logon sequences are enabled. The issue allows remote attackers to inject script via the query string to my.activation.php3 or my.logon.php3. FirePass 6.0.2 fixes the issue; hotfixes HF-...

2.6CVSS5.8AI score0.05923EPSS
CVE
CVE•added 2007/01/11 2:0 a.m.•56 views

CVE-2007-0186

CVE-2007-0186 concerns multiple cross-site scripting (XSS) flaws in F5 FirePass SSL VPN . The reference entries describe injectable script/HTML through numerous parameters across several components (for example, xcho in my.logon.php3; color and text parameters in vdesk/admincon/index.php; ua in b...

6.8CVSS5.7AI score0.01894EPSS
Web
CVE
CVE•added 2006/07/13 12:0 a.m.•52 views

CVE-2006-3550

CVE-2006-3550 concerns multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x . The affected component is the web interface, with the flaw enabling remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," inclu...

2.6CVSS5.8AI score0.01391EPSS
CVE
CVE•added 2006/03/22 2:0 a.m.•49 views

CVE-2006-1357

CVE-2006-1357 describes a cross-site scripting (XSS) vulnerability in the F5 Firepass 4100 SSL VPN, specifically in the file my.support.php3 (version 5.4.2). The issue allows remote attackers to inject arbitrary web script or HTML by supplying a value in the s parameter. The available documents d...

4.3CVSS5.7AI score0.01937EPSS
CVE
CVE•added 2008/04/30 3:0 p.m.•48 views

CVE-2008-2030

Technical details (affected product/version, root cause, impact, exploit info) are not publicly available in the provided connected documents. Monitor for updates.

4.3CVSS5.6AI score0.01452EPSS
CVE
CVE•added 2007/11/15 12:0 a.m.•47 views

CVE-2007-5979

The CVE-2007-5979 entry describes a Cross-site scripting (XSS) vulnerability in F5 Firepass 4100 SSL VPN, specifically in the download_plugin.php3 component. The root cause is untrusted input in the backurl parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected soft...

4.3CVSS5.7AI score0.02597EPSS