CVE-2008-1208

MEDIO 4.3CVE-2008-1208 · Published 08/03/2008 · updated 16/06/2026

En resumen

CVE-2008-1208 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a vpn-1 utm edge w embedded ngx (checkpoint).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
vpn-1 utm edge w embedded ngx checkpoint	`= 7.0.48`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter.

References

secunia.com/advisories/29243 · Vendor Advisory
louhi.fi/advisory/checkpoint_080306.txt
securityfocus.com/archive/1/489203/100/0/threaded
securityfocus.com/bid/28116
securitytracker.com/id
vupen.com/english/advisories/2008/0788
exchange.xforce.ibmcloud.com/vulnerabilities/41032
supportcenter.checkpoint.com/supportcenter/portal

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free