Published: 10/09/2012 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 455

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.

Vulnerable Product	Search on Vulmon	Subscribe to Product
manageengine firewall analyzer 7.2

################################################################################################ # # # :::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities:::: # # ############################################ ...

source: wwwsecurityfocuscom/bid/52841/info Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the at ...

source: wwwsecurityfocuscom/bid/52841/info Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow th ...

source: wwwsecurityfocuscom/bid/52841/info Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the atta ...

source: wwwsecurityfocuscom/bid/52841/info Firewall Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the ...

CWE-79 http://osvdb.org/80873 http://osvdb.org/80872 http://www.securityfocus.com/bid/52841 http://osvdb.org/80875 http://osvdb.org/80874 http://packetstormsecurity.org/files/111474/VL-437.txt http://www.vulnerability-lab.com/get_content.php?id=437 http://secunia.com/advisories/48657 https://exchange.xforce.ibmcloud.com/vulnerabilities/74538 https://nvd.nist.gov https://www.exploit-db.com/exploits/35933/

CVE-2012-4889

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect