← Database

CVE-2010-2290

MEDIUM CVSS: 4.3 Published: 2010-06-15 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected Platforms

Mcafee Unified Threat Management FirewallMcafee Unified Threat Management Firewall Firmware

Weakness Type

CWE-79

References