CVE-2007-5472

MOYENNE 4.3CVE-2007-5472 · Published 22/10/2007 · updated 16/06/2026

En bref

CVE-2007-5472 est une vulnérabilité MOYENNE (CVSS 4.3) touchant host-based intrusion prevention system (broadcom).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.4%, plus élevée que 84.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
host-based intrusion prevention system broadcom	`≤ 8`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.

References

osvdb.org/37998
secunia.com/advisories/27301 · Patch
securitytracker.com/id
supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp · Patch
securityfocus.com/archive/1/482536/100/0/threaded
securityfocus.com/bid/26134
vupen.com/english/advisories/2007/3547
exchange.xforce.ibmcloud.com/vulnerabilities/37285

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free