CVE-2012-3238: Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject…

PriorityP420medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EPSS

3.48%

87.6th percentile

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
astaro	security_gateway_software	<= 8.3	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management	—	—
sophos	unified_threat_management_software	<= 8.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.