) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/h:f5:firepass_4100:5.4.2
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2007-6704 |
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3. Published: March 05, 2008; 6:44:00 PM -0500 |
V3.x:(not available) V2.0: 2.6 LOW |
| CVE-2007-5979 |
Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter. Published: November 14, 2007; 7:46:00 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2006-3550 |
Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends." Published: July 12, 2006; 8:05:00 PM -0400 |
V3.x:(not available) V2.0: 2.6 LOW |
| CVE-2006-1357 |
Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Published: March 21, 2006; 9:02:00 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |