CVE-2008-2333: Barracuda Networks Barracuda Spam Firewall

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

Affected products

• Barracuda Networks Barracuda Spam Firewall: up to and including 3.5.11.020; version 3.1.10 only; version 3.1.16 only; version 3.1.17 only; version 3.1.18 only; version 3.3.0.54 only; …

Published 2008-05-23. Last modified 2026-06-16.