Back to Database
Status published
Medium
CVE-2006-2925
Cross-site scripting (XSS) vulnerability in the web interface in Ingate...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2925
Credits & Attribution
No credits recorded in the NVD database.
References
More from ingate
View All →CVE-2008-0263
The SIP module in Ingate Firewall before 4.6.1 and SIParator...
Medium
5
CVE-2007-6099
Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before...
Critical
10
CVE-2007-6098
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not...
High
7.5
CVE-2007-6097
Unspecified vulnerability in the ICMP implementation in Ingate Firewall before...
Critical
10
CVE-2007-6096
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext...
Medium
5
Affected Vendor
ingate
View all reports →Affected Software
ingate firewall, siparator
Vulnerable Versions:
0, 4.3.1
Timeline
Official Publish:
June 9th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.