First published: Wed Dec 05 2012(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a parameter to assets/login or (2) the query parameter to assets/rangesearch.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ForeScout CounterACT | =6.3.4.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.