GCVE - cpe:2.3:h:f5:firepass_4100:5.4.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:f5:firepass_4100:5.4.2:*:*:*:*:*:*:*

part: h version: 5.4.2 update: *

Vendor	F5 (`cb05c4a2-e02e-586f-b9d0-d0370178d1e5`)
Product	Firepass 4100 (`127eae97-4d36-56af-9fe1-ae5860af5da9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6704`	vulnerable	2026-06-08 04:50:09.498351	Details available Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3. Published: 2008-03-05T23:00:00.000Z Updated: 2024-08-07T16:18:20.560Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3712 http://www.securityfocus.com/archive/1/492511/100/0/threaded http://secunia.com/advisories/27904 http://www.procheckup.com/Vulnerability_PR07-14.php http://www.osvdb.org/38981	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5979`	vulnerable	2026-06-08 04:50:07.394943	Details available Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter. Published: 2007-11-15T00:00:00.000Z Updated: 2024-08-07T15:47:00.617Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/483601/100/0/threaded http://www.securitytracker.com/id?1018937 http://securityreason.com/securityalert/3364 http://osvdb.org/38665 http://www.securityfocus.com/bid/26412	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3550`	vulnerable	2026-06-08 04:49:09.639481	Details available Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends." Published: 2006-07-13T00:00:00.000Z Updated: 2024-08-07T18:30:34.415Z Open on db.gcve.eu Reference links http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2352 http://www.securityfocus.com/archive/1/439033/100/0/threaded http://securitytracker.com/id?1016431 http://securityreason.com/securityalert/1237 http://www.securityfocus.com/bid/18799	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1357`	vulnerable	2026-06-08 04:48:57.016374	Details available Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Published: 2006-03-22T02:00:00.000Z Updated: 2024-08-07T17:12:20.557Z Open on db.gcve.eu Reference links http://secunia.com/advisories/19337 http://www.securityfocus.com/bid/17175 http://www.securityfocus.com/archive/1/428318/100/0/threaded http://securityreason.com/securityalert/611 https://exchange.xforce.ibmcloud.com/vulnerabilities/25393	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.