Security Advisory

CVE-2019-25429

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-19 12:02:43
Last updated 2026-05-24 01:36:48
Assigner VulnCheck
State PUBLISHED

Description

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_advanced endpoint. Attackers can inject JavaScript code through the GLOBAL_NETWORKS and GLOBAL_DNS parameters via POST requests to execute arbitrary scripts in users browsers.