CVE-2006-2925: Ingate Firewall

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality.

Affected products

• Ingate Ingate Firewall: up to and including 4.3.4; version 4.3.1 only
• Ingate Siparator: up to and including 4.3.4; version 4.3.1 only

Published 2006-06-09. Last modified 2026-06-16.