CVE-2012-2563 Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the B...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow (2) remote authenticated administrators to inject arbitrary web script or HTML via vectors involving administrative menu functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bloxx web filtering | <= 5.0.13 | No fix listed |
References
- VU#722963 third-party-advisory us-government-resource
- www.kb.cert.org
- 53715 vdb-entry