VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2012· Updated Apr 29, 2026

CVE-2012-4043

CVE-2012-4043

Description

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action.

Affected products

12
  • Palo Alto/Global Protected Gateway4 versions
    cpe:2.3:a:palo_alto:global_protected_gateway:3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:palo_alto:global_protected_gateway:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:3.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:4.0.5:*:*:*:*:*:*:*
  • Palo Alto/SSL VPN4 versions
    cpe:2.3:a:palo_alto:ssl_vpn:3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:palo_alto:ssl_vpn:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:3.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:4.0.5:*:*:*:*:*:*:*
  • Palo Alto/Networks4 versions
    cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1.11:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:4.0:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:4.0.5:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.