CVEvulnerability
CVE-2008-2637
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the sql_matchscope parameter in vdesk/admincon/index.php.
Affected configurations
• f5 firepass ssl vpn 6.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/30550 Vendor Advisory
- http://securityreason.com/securityalert/3931 securityreason.com
- http://www.securityfocus.com/archive/1/493149/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29574 www.securityfocus.com
- http://www.securitytracker.com/id?1020205 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1765/references Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42884 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30550 Vendor Advisory
- http://securityreason.com/securityalert/3931 securityreason.com
- http://www.securityfocus.com/archive/1/493149/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29574 www.securityfocus.com
- http://www.securitytracker.com/id?1020205 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1765/references Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42884 exchange.xforce.ibmcloud.com