CVE-2008-1463
Last modified
CVE-2008-1463 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page.. EPSS estimates a 1.58% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Imperva | Securesphere | 5.0 |
| Imperva | Securesphere Mx Management Server | 5 |
| Imperva | Securesphere Mx Management Server | 5.0 |
References
- http://secunia.com/advisories/29439Vendor Advisory
- http://secunia.com/advisories/29439Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1463?
How severe is CVE-2008-1463?
How do I fix CVE-2008-1463?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1457The Event System in Microsoft Windows 2000 SP4, XP SP2 and S…
- CVE-2008-1458Cross-site scripting (XSS) vulnerability in index.php in CS-…
- CVE-2008-1459SQL injection vulnerability in the Alberghi (com_alberghi) 2…
- CVE-2008-1460SQL injection vulnerability in the Joovideo (com_joovideo) 1…
- CVE-2008-1461Buffer overflow in XnView 1.92.1 allows user-assisted remote…
- CVE-2008-1462SQL injection vulnerability in the sections (Section) module…
- CVE-2008-1464Multiple SQL injection vulnerabilities in Gallarific Free Ed…
- CVE-2008-1465SQL injection vulnerability in the Detodas Restaurante (com_…
- CVE-2008-1466Multiple PHP remote file inclusion vulnerabilities in W-Agor…
- CVE-2008-1467CenterIM 4.22.3 and earlier allows user-assisted remote atta…
- CVE-2008-1468Cross-site scripting (XSS) vulnerability in namazu.cgi in Na…
- CVE-2008-1469Gallarific Free Edition 1.1 does not require authentication …
Are you affected by CVE-2008-1463?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST