CVE-2012-4889 Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to creat...
MediumCVSS 4.3
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ManageEngine firewall analyzer | = 7.2 | No fix listed |
References
- 80872 vdb-entry
- 80873 vdb-entry
- 80874 vdb-entry
- 80875 vdb-entry
- packetstormsecurity.org exploit
- 48657 third-party-advisory vendor-advisory
- 52841 exploit vdb-entry
- www.vulnerability-lab.com
- firewallanalyzer-multiple-xss(74538) vdb-entry