VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2012· Updated Jun 16, 2026

CVE-2012-4043

CVE-2012-4043

Description

Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a Login action.

Affected products

13
  • Palo Alto/Global Protected Gateway4 versions
    cpe:2.3:a:palo_alto:global_protected_gateway:3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:palo_alto:global_protected_gateway:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:3.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:global_protected_gateway:4.0.5:*:*:*:*:*:*:*
  • Palo Alto/SSL VPN4 versions
    cpe:2.3:a:palo_alto:ssl_vpn:3.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:palo_alto:ssl_vpn:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:3.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:palo_alto:ssl_vpn:4.0.5:*:*:*:*:*:*:*
  • Palo Alto/Networks4 versions
    cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:3.1.11:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:4.0:*:*:*:*:*:*
    • cpe:2.3:h:palo_alto:networks:global_protect_portal:4.0.5:*:*:*:*:*:*
  • Paloaltonetworks/Global Protect Portalllm-fuzzy
    Range: >=3.1, <=3.1.11, >=4.0, <=4.0.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.