exploitDog

CVE-2010-0475

Опубликовано: 14 мая 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2010-05/0086.html
Exploit
http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page=
Exploit
http://www.securityfocus.com/bid/40113
https://exchange.xforce.ibmcloud.com/vulnerabilities/58624
http://archives.neohapsis.com/archives/bugtraq/2010-05/0086.html
Exploit
http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page=
Exploit
http://www.securityfocus.com/bid/40113
https://exchange.xforce.ibmcloud.com/vulnerabilities/58624

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:palo_alto_networks:firewall:*:*:*:*:*:*:*:*

Версия до 3.0.8 (включая)

Конфигурация 2

cpe:2.3:h:palo_alto_networks:firewall:*:*:*:*:*:*:*:*

Версия до 3.1.0 (включая)

EPSS

Процентиль: 89%

0.03823

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-3657-w454-hxhx

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter.

EPSS

Процентиль: 89%

0.03823

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79