CVEvulnerability
CVE-2009-2119
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter.
Affected configurations
• f5 firepass ssl vpn 5.5
• f5 firepass ssl vpn 5.5.1
• f5 firepass ssl vpn 5.5.2
• f5 firepass ssl vpn 6.0
• f5 firepass ssl vpn 6.0.1
• f5 firepass ssl vpn 6.0.2
• f5 firepass ssl vpn 6.0.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/55040 osvdb.org
- http://secunia.com/advisories/35418 Vendor Advisory
- http://secunia.com/advisories/35426 Vendor Advisory
- http://www.securityfocus.com/archive/1/504232/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35312 www.securityfocus.com
- http://www.securitytracker.com/id?1022387 Patch
- http://www.vupen.com/english/advisories/2009/1570 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51064 exchange.xforce.ibmcloud.com
- https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106 Vendor Advisory
- https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf www.fox-it.com
- http://osvdb.org/55040 osvdb.org
- http://secunia.com/advisories/35418 Vendor Advisory
- http://secunia.com/advisories/35426 Vendor Advisory
- http://www.securityfocus.com/archive/1/504232/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35312 www.securityfocus.com
- http://www.securitytracker.com/id?1022387 Patch
- http://www.vupen.com/english/advisories/2009/1570 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51064 exchange.xforce.ibmcloud.com
- https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106 Vendor Advisory
- https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf www.fox-it.com