CVE-2008-1463 Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibi...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imperva securesphere | = 5.0 | No fix listed |
| imperva securesphere mx management server | = 5 | No fix listed |
| imperva securesphere mx management server | = 5.0 | No fix listed |
References
- imperva.com
- 29439 third-party-advisory vendor-advisory
- 28279 exploit vdb-entry
- securesphere-mxmanagementserver-gui-xss(41359) vdb-entry