CVE-2007-5472

no score yetEPSS 2.4%

Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-10-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

broadcom:host-based_intrusion_prevention_system

References

http://osvdb.org/37998
http://secunia.com/advisories/27301
http://securitytracker.com/id?1018839
http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp
http://www.securityfocus.com/archive/1/482536/100/0/threaded

Check your stack JSON