Comodo Dome Firewall
Approved changes feed: RSS · Atom
cpe:2.3:a:cdome:comodo_dome_firewall:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cdome (717163b5-1bee-5c99-a22d-6ecc3581af8e) |
|---|---|
| Product | Comodo Dome Firewall (7f379b7c-1f80-5e2f-a7e8-ba0902dcb125) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25430 |
vulnerable | 2026-06-08 05:13:42.348184 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via vpn_users
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter. Attackers can send POST requests to the vpn_users endpoint with script payloads in the username field to execute arbitrary JavaScript in victim browsers.
Published: 2026-02-19T12:02:44.636Z
Updated: 2026-05-24T01:36:49.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25428 |
vulnerable | 2026-06-08 05:13:42.347348 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via openvpn_users
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with script payloads in the username, remotenets, explicitroutes, static_ip, custom_dns, or custom_domain parameters to execute arbitrary JavaScript in users' browsers.
Published: 2026-02-19T12:02:42.885Z
Updated: 2026-05-24T01:36:47.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25427 |
vulnerable | 2026-06-08 05:13:42.347001 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via antispyware
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint. Attackers can send POST requests with JavaScript payloads in the DNSMASQ_WHITELIST or DNSMASQ_BLACKLIST parameters to execute arbitrary code in users' browsers.
Published: 2026-02-19T12:02:42.103Z
Updated: 2026-05-24T01:36:47.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25425 |
vulnerable | 2026-06-08 05:13:42.346075 |
Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via smtpconfig
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter. Attackers can send POST requests to the smtpconfig endpoint with script payloads to execute arbitrary JavaScript in the context of an administrator's browser session.
Published: 2026-02-19T12:02:40.546Z
Updated: 2026-05-24T01:36:45.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25423 |
vulnerable | 2026-06-08 05:13:42.345242 |
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig
MEDIUM (6.1)
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, and DST_NOCACHE to execute arbitrary scripts in administrator browsers.
Published: 2026-02-19T12:02:38.602Z
Updated: 2026-05-24T01:36:44.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25422 |
vulnerable | 2026-06-08 05:13:42.344903 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25419 |
vulnerable | 2026-06-08 05:13:42.343787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25417 |
vulnerable | 2026-06-08 05:13:42.342914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25416 |
vulnerable | 2026-06-08 05:13:42.342554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25415 |
vulnerable | 2026-06-08 05:13:42.342033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25414 |
vulnerable | 2026-06-08 05:13:42.340226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25413 |
vulnerable | 2026-06-08 05:13:42.339700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25412 |
vulnerable | 2026-06-08 05:13:42.339353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25411 |
vulnerable | 2026-06-08 05:13:42.338889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25409 |
vulnerable | 2026-06-08 05:13:42.337848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.