Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Profense Web Application Firewall lets attackers inject malicious scripts

CVE-2009-1593 · published 17 years ago
Summary

The Profense Web Application Firewall versions before 2.2.22 and before 2.4.4 do not correctly block crafted web pages that contain altered script tags. This flaw can let a remote user run unwanted code in a visitor’s browser, potentially stealing data or hijacking sessions. Update the firewall to the latest version or apply the vendor’s recommended patch to stop the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
armorlogic profense_web_application_firewall <= 2.2.21
2.4
cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*
Original advisory text
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (...
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published21 May 2009
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2009-1593 · NVD
Track software like this
Free during beta