CVE-2007-5472: XSS
First published: Mon Oct 22 2007(Updated: )
Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Host-Based Intrusion Prevention System | <=8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp
- http://secunia.com/advisories/27301
- http://www.securityfocus.com/bid/26134
- http://securitytracker.com/id?1018839
- http://osvdb.org/37998
- http://www.vupen.com/english/advisories/2007/3547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37285
- http://www.securityfocus.com/archive/1/482536/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-5472?
CVE-2007-5472 is considered a medium severity vulnerability due to its ability to facilitate cross-site scripting attacks.
How do I fix CVE-2007-5472?
To fix CVE-2007-5472, upgrade to CA Host-Based Intrusion Prevention System version 8.0.0.93 or later.
Who is affected by CVE-2007-5472?
CVE-2007-5472 affects users of CA Host-Based Intrusion Prevention System versions prior to 8.0.0.93.
What type of vulnerability is CVE-2007-5472?
CVE-2007-5472 is a cross-site scripting (XSS) vulnerability.
What can attackers do through CVE-2007-5472?
Attackers can inject arbitrary web script or HTML via logging requests that are displayed in the log viewer.
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/broadcom
- canonical/broadcom host-based intrusion prevention system
- version/broadcom host-based intrusion prevention system/8