5 matches found
CVE-2012-4982
CVE-2012-4982 is an open redirect vulnerability in the Forescout CounterACT NAC device (pre-7.0) affecting the assets/login page. The issue allows remote attackers to redirect users to arbitrary sites via the a parameter, enabling phishing attacks. Connections in the provided documents confirm th...
CVE-2012-4983
The CVE-2012-4983 issue affects Forescout CounterACT/NAC devices, with XSS vulnerabilities on the login page via the a parameter and on the rangesearch query, allowing arbitrary script injection. It applies to versions prior to 7.0 (notably seen in 6.3.4.1). Impact includes potential redirection ...
CVE-2012-1825
The CVE-2012-1825 entry concerns XSS vulnerabilities in the ForeScout CounterACT appliance (software 6.3.3.2–6.3.4.10) where the status program’s web interface is vulnerable. Specifically, attackers can inject arbitrary script via (1) loginname in a forgotpass action or (2) username, enabling ref...
CVE-2012-4985
CVE-2012-4985 concerns the Forescout CounterACT NAC device 6.3.4.1, where ICMP and ARP traffic from unrecognized clients is not blocked. This results in a protocol-filter bypass that could enable ARP poisoning via crafted packets. The connected sources describe the impact as attacker-controlled A...