CVE-2012-4739

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or…

published August 31, 2012

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or HTML via the (1) policyLaunching, (2) resourcePrefix, or (3) actionPath parameter in showUserResourceCategories.do; (4) list or (5) path parameter to fileSystem.do; or (6) return-To parameter to launchAgent.do.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03291 · 88.3th percentile
Published
2012-08-31T20:00Z
EPSS history
Timeline
  • 31 AUG 20:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote attackers to inject arbitrary web script or…
    cvelistv5