CVE-2012-3238: Astaro Security Gateway

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.

Affected products

• Astaro Security Gateway
• Astaro Security Gateway Software: up to and including 8.3
• Sophos Unified Threat Management
• Sophos Unified Threat Management Software: up to and including 8.3

Published 2012-07-09. Last modified 2026-06-16.