CVE-2010-2290

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.33%

Published

Jun 15, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Weaknesses (CWE)

CWE-79

Affected Products (4)

mcafee · unified_threat_management_firewall_firmwarevulnerable

mcafee · unified_threat_management_firewall

References (14)

http://ngenuity-is.com/advisories/2010/jun/9/mcafee-utm-firewall-help-cross-site-scripting/

Exploit

http://secunia.com/advisories/40089

Vendor Advisory

http://secunia.com/advisories/40138

Vendor Advisory

http://www.securityfocus.com/archive/1/511771/100/0/threaded

http://www.securitytracker.com/id?1024091

Exploit

http://www.vupen.com/english/advisories/2010/1413

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10010

PatchVendor Advisory

http://ngenuity-is.com/advisories/2010/jun/9/mcafee-utm-firewall-help-cross-site-scripting/

Exploit

http://secunia.com/advisories/40089

Vendor Advisory

http://secunia.com/advisories/40138

Vendor Advisory

http://www.securityfocus.com/archive/1/511771/100/0/threaded

http://www.securitytracker.com/id?1024091

Exploit

http://www.vupen.com/english/advisories/2010/1413

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10010

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs