PT-2014-2180
CVE-2011-4887
·
تاريخ النشر
2014-09-11
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Imperva SecureSphere Web Application Firewall (WAF) version 9.0
Description
A cross-site scripting (XSS) issue exists in the Violations Table of the management GUI in the MX Management Server, allowing remote attackers to inject arbitrary web script or HTML via the
username field.Recommendations
For version 9.0, consider restricting access to the management GUI to minimize the risk of exploitation until a fix is available. Avoid using the
username field in the Violations Table until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾