← Back

Bradfordnetworks

bradfordnetworks

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Network Sentry Appliance Software
network_sentry_appliance_software
3 CVEs
Network Sentry Appliance
network_sentry_appliance
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-2606
1Bradfordnetworks
2Network Sentry Appliance
Network Sentry Appliance Software
Apr 29, 2026
Jun 13, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 456...Show more
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.Show less
CVE-2012-2605
1Bradfordnetworks
2Network Sentry Appliance
Network Sentry Appliance Software
Apr 29, 2026
Jun 13, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (...Show more
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that (1) insert XSS sequences or (2) send messages to clients.Show less
CVE-2012-2604
1Bradfordnetworks
2Network Sentry Appliance
Network Sentry Appliance Software
Apr 29, 2026
Jun 13, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to...Show more
Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields.Show less