Published: 31/08/2012 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN prior to 2.2.2.203 (2012-07-05) allow remote malicious users to inject arbitrary web script or HTML via the (1) policyLaunching, (2) resourcePrefix, or (3) actionPath parameter in showUserResourceCategories.do; (4) list or (5) path parameter to fileSystem.do; or (6) return-To parameter to launchAgent.do.

Vulnerable Product	Search on Vulmon	Subscribe to Product
barracudanetworks barracuda ssl vpn 1.5.0.29
barracudanetworks barracuda ssl vpn 1.2.6.004
barracudanetworks barracuda ssl vpn

source: wwwsecurityfocuscom/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may ...

source: wwwsecurityfocuscom/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may l ...

CWE-79 http://archives.neohapsis.com/archives/bugtraq/2012-08/0003.html https://www.barracudanetworks.com/ns/support/tech_alert.php http://www.securityfocus.com/bid/54761 http://www.securitytracker.com/id?1027279 https://exchange.xforce.ibmcloud.com/vulnerabilities/77365 https://nvd.nist.gov https://www.exploit-db.com/exploits/37513/

CVE-2012-4739

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect