CVE-2012-5316
Last modified
CVE-2012-5316 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module.. EPSS estimates a 0.98% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) Troubleshooting in the Trace route Device module or (2) LDAP Username in the LDAP Configuration module.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Barracudanetworks | Spam \& Virus Firewall 600 Firmware | <= 4.0.1.009 |
| Barracudanetworks | Spam \& Virus Firewall 600 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-5316?
How severe is CVE-2012-5316?
How do I fix CVE-2012-5316?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-5310SQL injection vulnerability in the WP e-Commerce plugin befo…
- CVE-2012-5311Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2012-5312SQL injection vulnerability in Tribiq CMS allows remote atta…
- CVE-2012-5313SQL injection vulnerability in forum.asp in Snitz Forums 200…
- CVE-2012-5314Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 an…
- CVE-2012-5315Multiple cross-site scripting (XSS) vulnerabilities in php i…
- CVE-2012-5317SQL injection vulnerability in main_bigware_43.php in Bigwar…
- CVE-2012-5318Unrestricted file upload vulnerability in uploadify/scripts/…
- CVE-2012-5319Cross-site request forgery (CSRF) vulnerability in setup/sec…
- CVE-2012-5320Cross-site request forgery (CSRF) vulnerability in password.…
- CVE-2012-5321tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows …
- CVE-2012-5322Multiple cross-site scripting (XSS) vulnerabilities in Xavi …
Are you affected by CVE-2012-5316?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST