Read the docs

Comodo

Records93All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Comodo records in CISA KEV

No Comodo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

29 records in Dome Firewall · all components

Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00394 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00413 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00341 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00426 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIONSITELIST parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the device parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_permanent_users endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00444 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the NTP_SERVER_LIST parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWAY_GREEN parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmask_addr parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00457 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through admin management parameters.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00348 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00335 Published 2026-02-19 No fix listed CWE-79
Priority LOW 24

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00426 Published 2026-02-19 No fix listed CWE-79
Load more
Open these records in search →