CVE-2009-2119

published 2009-06-18

CVE-2009-2119: Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—
f5	firepass_ssl_vpn	—	—

CWE-79