PT-2007-6294 · Arbor Networks · Arbor Networks Peakflow Sp

Published 2007-10-04 · Updated 2017-07-29 · CVE-2007-5211

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Arbor Networks Peakflow SP versions 3.5.1 through 3.5.1 before patch 14 Arbor Networks Peakflow SP versions 3.6.1 through 3.6.1 before patch 5

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests when scope accounts are enabled.

Recommendations For Arbor Networks Peakflow SP version 3.5.1, apply patch 14 to resolve the issue. For Arbor Networks Peakflow SP version 3.6.1, apply patch 5 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5211

Affected Products

Arbor Networks Peakflow Sp

References · 4

• http://secunia.com/advisories/27003 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5211 · Security Note
• http://securityfocus.com/bid/25910 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36926 · Note