Back to Database
Status published
Medium
CVE-2012-3238
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-3238
Credits & Attribution
No credits recorded in the NVD database.
References
More from astaro
View All →CVE-2007-4243
Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7...
High
7.8
CVE-2007-4242
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does...
Medium
5
CVE-2007-3253
Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005...
High
7.8
CVE-2005-3985
The Internet Key Exchange version 1 (IKEv1) implementation in Astaro...
High
7.8
CVE-2005-3100
Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027...
Medium
5
Affected Vendor
astaro
View all reports →Affected Software
security gateway software, security gateway, unified threat management software, unified threat management
Vulnerable Versions:
0, 110, 120, 220, 320, 425, 525, 625
Timeline
Official Publish:
July 9th, 2012
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.