IBM Proventia Network Ips GX5008 vulnerabilities

2 CVEs affecting IBM Proventia Network Ips GX5008, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3831, published 2007-07-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-3831, published 2007-07-17. High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days. PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
• CVE-2007-3830, published 2007-07-17. Low severity, CVSS 3.5. EPSS: 2.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.