CVE-2012-4923
endian firewall: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.
Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- endian:firewall
References
- http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html
- http://www.securityfocus.com/bid/52076
- http://www.vulnerability-lab.com/get_content.php?id=436
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73330
- http://packetstormsecurity.org/files/109942/Endian-UTM-Firewall-2.4.x-Cross-Site-Scripting.html