Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

29 records

Priority LOW 24

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00426 Published 2026-02-19 No fix listed CWE-79
Priority LOW 24

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_advanced endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00444 Published 2026-02-19 No fix listed CWE-79
Priority LOW 23

Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through POST parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00426 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIONSITELIST parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00394 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 63

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoint.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00413 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00461 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the device parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_permanent_users endpoint.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00444 Published 2026-02-19 No fix listed CWE-79
Priority LOW 24

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00443 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the NTP_SERVER_LIST parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00382 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWAY_GREEN parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00397 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmask_addr parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00393 Published 2026-02-19 No fix listed CWE-79
Priority MEDIUM 56

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00457 Published 2026-02-19 No fix listed CWE-79
Load more