Armorlogic

Profense Web Application Firewall

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2009-1745

  • EPSS 0.67%
  • Veröffentlicht 21.05.2009 15:30:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.

4.3

CVE-2009-1593

  • EPSS 0.23%
  • Veröffentlicht 21.05.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT eleme...

7.5

CVE-2009-1594

  • EPSS 0.44%
  • Veröffentlicht 21.05.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated b...

4.3

CVE-2009-0467

Exploit
  • EPSS 1.35%
  • Veröffentlicht 10.02.2009 07:00:24
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.

6.8

CVE-2009-0468

Exploit
  • EPSS 0.12%
  • Veröffentlicht 10.02.2009 07:00:24
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send pin...