CVEvulnerability
CVE-2008-0914
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ipdiva ipdiva 2.2
• ipdiva ipdiva 2.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html lists.grok.org.uk
- http://secunia.com/advisories/28963 Vendor Advisory
- http://securityreason.com/securityalert/3690 securityreason.com
- http://www.securityfocus.com/archive/1/488143/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/488204/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27800 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40545 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060315.html lists.grok.org.uk
- http://secunia.com/advisories/28963 Vendor Advisory
- http://securityreason.com/securityalert/3690 securityreason.com
- http://www.securityfocus.com/archive/1/488143/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/488204/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27800 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40545 exchange.xforce.ibmcloud.com