CVE-2007-5472

Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.

Link	Resource
http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp	Patch
http://secunia.com/advisories/27301	Patch Vendor Advisory
http://www.securityfocus.com/bid/26134
http://securitytracker.com/id?1018839
http://osvdb.org/37998
http://www.vupen.com/english/advisories/2007/3547
https://exchange.xforce.ibmcloud.com/vulnerabilities/37285
http://www.securityfocus.com/archive/1/482536/100/0/threaded

Configuration 1

cpe:2.3:a:broadcom:host-based_intrusion_prevention_system:*:*:*:*:*:*:*:*

---

Published : 2007-10-22 07:46

Updated : 2021-04-09 04:52

---

NVD link : CVE-2007-5472

Mitre link : CVE-2007-5472

No products.

CWE-79