Vulnerability Details CVE-2012-2604
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.3%
CVSS Severity
CVSS v2 Score 3.5
References
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX
Products affected by CVE-2012-2604
-
cpe:2.3:a:bradfordnetworks:network_sentry_appliance_software:5.3
-
cpe:2.3:h:bradfordnetworks:network_sentry_appliance:ns500rx
-
cpe:2.3:h:bradfordnetworks:network_sentry_appliance:ns500x