CVSS: 6.1EPSS: 2%CPEs: 1EXPL: 7CVE-2012-4889 – ManageEngine Firewall Analyzer 8.0 - Directory Traversal / Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2012-4889
10 Sep 2012 — Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url, (4) subTab, or (5) tab parameter to mindex.do; (6) tab parameter to index2.do; or (7) port parameter to syslogViewer.do. Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en ManageEngine Firewall Analyzer v7.2 permiten a atacantes remotos inyectar secuencias de c... • https://www.exploit-db.com/exploits/35933 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 4%CPEs: 1EXPL: 3CVE-2012-4891 – ManageEngine Firewall Analyzer 8.0 - Directory Traversal / Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2012-4891
10 Sep 2012 — Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en fw/index2.do en ManageEngine Firewall Analyzer v7.2 permite a atacantes remotos inyectar secuencias de co... • https://www.exploit-db.com/exploits/35933 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2008-1775
https://notcve.org/view.php?id=CVE-2008-1775
14 Apr 2008 — Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en mindex.do de ManageEngine Firewall Analyzer 4.0.3, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del paráme... • http://secunia.com/advisories/29632 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2007-1642
https://notcve.org/view.php?id=CVE-2007-1642
24 Mar 2007 — Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request. Una vulnerabilidad no especificada en ManageEngine Firewall Analyzer permite a los usuarios autenticados remotos "access any common file" por medio de una petición de URL directa. • http://osvdb.org/34525 •