Firepass 4100
Approved changes feed: RSS · Atom
cpe:2.3:h:f5:firepass_4100:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Firepass 4100 (127eae97-4d36-56af-9fe1-ae5860af5da9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2030 |
vulnerable | 2026-06-08 04:50:22.682270 |
Details available
Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query string. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2008-04-30T15:00:00.000Z
Updated: 2024-08-07T08:49:56.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3097 |
vulnerable | 2026-06-08 04:49:46.813258 |
Details available
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter.
Published: 2007-06-06T22:00:00.000Z
Updated: 2024-08-07T14:05:29.274Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0186 |
vulnerable | 2026-06-08 04:49:31.637380 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via (1) the xcho parameter to my.logon.php3; the (2) topblue, (3) midblue, (4) wtopblue, and certain other Custom color parameters in a per action to vdesk/admincon/index.php; the (5) h321, (6) h311, (7) h312, and certain other Front Door custom text color parameters in a per action to vdesk/admincon/index.php; the (8) ua parameter in a bro action to vdesk/admincon/index.php; the (9) app_param and (10) app_name parameters to webyfiers.php; (11) double eval functions; (12) JavaScript contained in an <FP_DO_NOT_TOUCH> element; and (13) the vhost parameter to my.activation.php. NOTE: it is possible that this candidate overlaps CVE-2006-3550.
Published: 2007-01-11T02:00:00.000Z
Updated: 2024-08-07T12:12:17.273Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.