CVE-2012-1825 Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web sc...
MediumCVSS 4.3
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via (1) the loginname parameter in a forgotpass action or (2) the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| forescout counteract | = 6.3.3.2 | No fix listed |
| forescout counteract | = 6.3.4.10 | No fix listed |
References
- VU#815532 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource