F5 Firepass 4100 vulnerabilities

7 CVEs affecting F5 Firepass 4100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2030, published 2008-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6704, published 2008-03-05. Low severity, CVSS 2.6. EPSS: 5.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject…
CVE-2007-5979, published 2007-11-15. Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2007-3097, published 2007-06-06. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter.
CVE-2007-0186, published 2007-01-12. Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via (1) the xcho parameter to my.logon.php3; the (2) topblue,…
CVE-2006-1357, published 2006-03-22. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVE-2008-2030, published 2008-04-30. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 allows remote attackers to inject arbitrary web script or HTML via the query…
CVE-2006-3550, published 2006-07-13. Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden…