CVE-2008-2637

{"id": "CVE-2008-2637", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-06-10T00:32:00.000", "references": [{"url": "http://secunia.com/advisories/30550", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3931", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/493149/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29574", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1020205", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1765/references", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42884", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in (1) the css_exceptions parameter in vdesk/admincon/webyfiers.php and (2) the sql_matchscope parameter in vdesk/admincon/index.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de tipo cross-site scripting (XSS) en F5 FirePass SSL VPN versiones 6.0.2 hotfix 3, y posiblemente versiones anteriores, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de comillas en (1) el par\u00e1metro css_exceptions en el archivo vdesk/admincon/webyfiers.php y (2) el par\u00e1metro sql_matchscope en el archivo vdesk/admincon/index.php."}], "lastModified": "2018-10-11T20:42:00.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f5:firepass_ssl_vpn:6.0.2:hotfix_3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40A7BB18-7A3D-4EB3-9878-78F52E17ADBA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}