Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
armorlogic profense web application firewall 2.4 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2009-1593
Armorlogic Profense Web Application Firewall prior to 2.2.22, and 2.4.x prior to 2.4.4, does not properly implement the "negative model," which allows remote malicious users to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.
Armorlogic Profense Web Application Firewall 2.4
Armorlogic Profense Web Application Firewall
1 EDB exploit
7.5
CVSSv2
CVE-2009-1594
Armorlogic Profense Web Application Firewall prior to 2.2.22, and 2.4.x prior to 2.4.4, does not properly implement the "positive model," which allows remote malicious users to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in...
Armorlogic Profense Web Application Firewall 2.4
Armorlogic Profense Web Application Firewall
10
CVSSv2
CVE-2009-1745
Armorlogic Profense Web Application Firewall prior to 2.2.22, and 2.4.x prior to 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote malicious users to obtain access.
Armorlogic Profense Web Application Firewall
Armorlogic Profense Web Application Firewall 2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started