CVE-2019-25403

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.4 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N                                    

Vulnerability Description

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the comment parameter. Attackers can inject JavaScript code through the admin_profiles endpoint that executes in the browsers of other users who view the affected page.

Vulnerability Details

Published Date

February 19, 2026

Last Modified

February 20, 2026

CWE ID

CWE-79

Source

NVD

Vendor

Cdome

Product

Comodo Dome Firewall

External References

https://cdome.comodo.com/firewall/
https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278
https://www.exploit-db.com/exploits/46408
https://www.vulncheck.com/advisories/comodo-dome-firewall-stored-cross-site-scripting-via-adminprofiles

CVE-2019-25403

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment