CVE-2019-25418

MEDIO 6.1CVE-2019-25418 · Published 19/02/2026 · updated 17/06/2026

In breve

CVE-2019-25418 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda dome firewall (comodo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.40%, superiore al 33.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dome firewall comodo	`≤ 2.7.0`	No fix yet

Description

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES parameter. Attackers can send POST requests to the /korugan/fwgroups endpoint with script payloads to execute arbitrary JavaScript in users' browsers and steal session data.

References

cdome.comodo.com/firewall · Product
secure.comodo.com/home/purchase.php · Not Applicable
exploit-db.com/exploits/46408 · Exploit
vulncheck.com/advisories/comodo-dome-firewall-reflected-cross-site-scripting-via-fwgroups · Third Party Advisory

Altre vulnerabilità di dome firewall

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dome firewall

comodo

≤ 2.7.0

No fix yet

Description

Altre vulnerabilità di dome firewall

Vedi tutto →