CVE-2012-4043 | BDVDB-2026-51297 Detail

Description#

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/83896
http://blog.abhisek.me/2012/06/xss-on-palo-alto-networks-global.html

Exploit#

No public exploit known

History#

Version 12012-07-26Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.