{"id":"CVE-2009-2119","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arb","description":"Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter.","publishedAt":"2009-06-18T21:00:00.000Z","updatedAt":"2024-08-07T05:36:20.963Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/35418","http://secunia.com/advisories/35426","https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","http://osvdb.org/55040","https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","http://www.securityfocus.com/archive/1/504232/100/0/threaded","http://www.securityfocus.com/bid/35312","https://exchange.xforce.ibmcloud.com/vulnerabilities/51064","http://www.vupen.com/english/advisories/2009/1570","http://www.securitytracker.com/id?1022387"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:19.962Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/2xxx/CVE-2009-2119.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-2119","state":"PUBLISHED","datePublished":"2009-06-18T21:00:00.000Z","dateUpdated":"2024-08-07T05:36:20.963Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2009-06-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/35418","name":"35418","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/35426","name":"35426","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","tags":["x_refsource_MISC"]},{"url":"http://osvdb.org/55040","name":"55040","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/archive/1/504232/100/0/threaded","name":"20090611 F5 FirePass Cross-Site Scripting vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/35312","name":"35312","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51064","name":"firepasssslvpn-unspecified-xss(51064)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.vupen.com/english/advisories/2009/1570","name":"ADV-2009-1570","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securitytracker.com/id?1022387","name":"1022387","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2009-06-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-2119","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"35418","refsource":"SECUNIA","url":"http://secunia.com/advisories/35418"},{"name":"35426","refsource":"SECUNIA","url":"http://secunia.com/advisories/35426"},{"name":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","refsource":"MISC","url":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106"},{"name":"55040","refsource":"OSVDB","url":"http://osvdb.org/55040"},{"name":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","refsource":"MISC","url":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf"},{"name":"20090611 F5 FirePass Cross-Site Scripting vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/504232/100/0/threaded"},{"name":"35312","refsource":"BID","url":"http://www.securityfocus.com/bid/35312"},{"name":"firepasssslvpn-unspecified-xss(51064)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51064"},{"name":"ADV-2009-1570","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/1570"},{"name":"1022387","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1022387"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/35418","name":"35418","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/35426","name":"35426","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://www.fox-it.com/nl/nieuws-en-events/nieuws/laatste-nieuws/nieuwsartikel/f5-firepass-cross-site-scripting-vulnerability/106","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://osvdb.org/55040","name":"55040","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://www.fox-it.com/uploads/pdf/advisory_xss_f5_firepass.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/504232/100/0/threaded","name":"20090611 F5 FirePass Cross-Site Scripting vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/35312","name":"35312","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51064","name":"firepasssslvpn-unspecified-xss(51064)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/1570","name":"ADV-2009-1570","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1022387","name":"1022387","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T05:36:20.963Z"}}]}}}