CVE-2012-4983 Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/lo...
MediumCVSS 4.3
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/login or (2) the query parameter to assets/rangesearch.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| forescout counteract | = 6.3.4.10 | No fix listed |
References
- www.reactionpenetrationtesting.co.uk
- 56688 vdb-entry