← Database

CVE-2009-2119

MEDIUM CVSS: 4.3 Published: 2009-06-18 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter.

Affected Platforms

F5 Firepass Ssl Vpn

Weakness Type

CWE-79

References