Approved changes feed: RSS · Atom

cpe:2.3:a:forescout:counteract:6.3.4.10:*:*:*:*:*:*:*

part: a version: 6.3.4.10 update: *

VendorForescout (95f9a982-e9ad-50f2-8965-309e26cd52ab)
ProductCounteract (b8dbc244-39b1-54e3-ad7f-fc0518263512)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4985 vulnerable 2026-06-08 05:02:53.505430 Details available
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
Published: 2012-12-05T11:00:00.000Z
Updated: 2024-08-06T20:50:18.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4983 vulnerable 2026-06-08 05:02:53.505111 Details available
Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/login or (2) the query parameter to assets/rangesearch.
Published: 2012-12-05T11:00:00.000Z
Updated: 2024-08-06T20:50:18.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4982 vulnerable 2026-06-08 05:02:53.504737 Details available
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter.
Published: 2012-12-05T11:00:00.000Z
Updated: 2024-08-06T20:50:18.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1825 vulnerable 2026-06-08 05:00:51.052328 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via (1) the loginname parameter in a forgotpass action or (2) the username parameter.
Published: 2012-06-11T23:00:00.000Z
Updated: 2024-09-17T04:04:35.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.