Multiple Cross-Site Scripting Vulnerabilities in Forescout CounterACT NAC Device

CVE-2012-4983

What is CVE-2012-4983?

The Forescout CounterACT NAC device is prone to multiple cross-site scripting (XSS) vulnerabilities that enable remote attackers to inject arbitrary web script or HTML. Specifically, attackers can exploit these vulnerabilities through the 'a' parameter in assets/login or via the query parameter in assets/rangesearch on versions prior to 7.0. This exposure can allow attackers to manipulate web pages and potentially compromise the security of users interacting with the affected system.

References