Approved changes feed: RSS · Atom

cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*

part: a version: 2.6.2 update: *

VendorArmorlogic (69792dc7-485c-5b21-90f2-c45aaa58d78f)
ProductProfense Web Application Firewall (68ff6509-aebe-52bb-99ff-aede7ad92abf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0468 vulnerable 2026-06-08 04:51:09.563710 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.
Published: 2009-02-06T01:00:00.000Z
Updated: 2024-08-07T04:31:26.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0467 vulnerable 2026-06-08 04:51:09.562644 Details available
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.
Published: 2009-02-06T01:00:00.000Z
Updated: 2024-08-07T04:31:26.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.