CVE-2012-3238

Published: Jul 9, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.

Affected (10)

Products: Astaro: Security Gateway Software, Security Gateway · Sophos: Unified Threat Management Software, Unified Threat Management

Astaro

2 products

Security Gateway Software

Security Gateway

Sophos

2 products

Unified Threat Management Software

Unified Threat Management

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Astaro Security Gateway Software	Up to 8.3
Astaro Security Gateway	All versions

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Sophos Unified Threat Management Software	Up to 8.3
Sophos Unified Threat Management	Version 110
Sophos Unified Threat Management	Version 120
Sophos Unified Threat Management	Version 220
Sophos Unified Threat Management	Version 320
Sophos Unified Threat Management	Version 425
Sophos Unified Threat Management	Version 525
Sophos Unified Threat Management	Version 625