F5 Firepass 4100 vulnerabilities
4 known vulnerabilities affecting f5/firepass_4100.
Total CVEs
4
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
MEDIUM2LOW2
Vulnerabilities
Page 1 of 1
CVE-2007-6704LOWCVSS 2.6PoCv5.4.1v5.4.2+12 more2008-03-05
CVE-2007-6704 [LOW] CWE-79 CVE-2007-6704: Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3.
nvd
CVE-2007-5979MEDIUMCVSS 4.3PoCv5.4v5.4.1+12 more2007-11-15
CVE-2007-5979 [MEDIUM] CWE-79 CVE-2007-5979: Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 thr
Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.
nvd
CVE-2006-3550LOWCVSS 2.6v5.4.22006-07-13
CVE-2006-3550 [LOW] CVE-2006-3550: Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote at
Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends."
nvd
CVE-2006-1357MEDIUMCVSS 4.3PoCv5.4.22006-03-22
CVE-2006-1357 [MEDIUM] CVE-2006-1357: Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows
Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
nvd