low3.5
CVE-2012-2604
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Net…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bradfordnetworks | Network Sentry Appliance Software | through 5.3 |
| Bradfordnetworks | Network Sentry Appliance | Versions ns500rx, ns500x |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX
- http://www.kb.cert.org/vuls/id/709939
- http://www.kb.cert.org/vuls/id/MAPG-8TJKAF
- https://na3.salesforce.com/sfc/#version?selectedDocumentId=06950000000IyBX