Dome Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:comodo:dome_firewall:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Comodo (ae0f5a94-22c5-54dd-8ff5-a3476482174a) |
|---|---|
| Product | Dome Firewall (407ab60e-107f-547a-a450-d574987bba9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25427 |
vulnerable | 2026-06-08 05:13:42.346980 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint. Attackers can send POST requests with JavaScript payloads in the DNSMASQ_WHITELIST or DNSMASQ_BLACKLIST parameters to execute arbitrary code in users' browsers.
Published: 2026-02-19T12:02:42.103Z
Updated: 2026-05-24T01:36:47.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25426 |
vulnerable | 2026-06-08 05:13:42.346566 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint. Attackers can send POST requests with script payloads in the TRANSPARENT_SOURCE_BYPASS or TRANSPARENT_DESTINATION_BYPASS parameters to execute arbitrary JavaScript in users' browsers.
Published: 2026-02-19T12:02:41.346Z
Updated: 2026-05-24T01:36:46.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25425 |
vulnerable | 2026-06-08 05:13:42.345973 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via smtpconfig
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter. Attackers can send POST requests to the smtpconfig endpoint with script payloads to execute arbitrary JavaScript in the context of an administrator's browser session.
Published: 2026-02-19T12:02:40.546Z
Updated: 2026-05-24T01:36:45.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25423 |
vulnerable | 2026-06-08 05:13:42.345222 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, and DST_NOCACHE to execute arbitrary scripts in administrator browsers.
Published: 2026-02-19T12:02:38.602Z
Updated: 2026-05-24T01:36:44.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25422 |
vulnerable | 2026-06-08 05:13:42.344883 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via vpnfw
HIGH (7.2)
Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint. Attackers can submit POST requests with script payloads in the target parameter for reflected XSS or the remark parameter for stored XSS to execute arbitrary JavaScript in administrator browsers.
Published: 2026-02-19T12:02:37.739Z
Updated: 2026-03-02T21:05:37.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25421 |
vulnerable | 2026-06-08 05:13:42.344548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25420 |
vulnerable | 2026-06-08 05:13:42.344111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25419 |
vulnerable | 2026-06-08 05:13:42.343766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25418 |
vulnerable | 2026-06-08 05:13:42.343424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25417 |
vulnerable | 2026-06-08 05:13:42.342893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25416 |
vulnerable | 2026-06-08 05:13:42.342429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25414 |
vulnerable | 2026-06-08 05:13:42.340203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25413 |
vulnerable | 2026-06-08 05:13:42.339680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25411 |
vulnerable | 2026-06-08 05:13:42.338765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25409 |
vulnerable | 2026-06-08 05:13:42.335704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25407 |
vulnerable | 2026-06-08 05:13:42.334977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25406 |
vulnerable | 2026-06-08 05:13:42.334646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25404 |
vulnerable | 2026-06-08 05:13:42.333695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25402 |
vulnerable | 2026-06-08 05:13:42.331920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.