CVE-2009-0467: Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3...

Security readout for executives and security teams

CVE-2009-0467 is a cross-site scripting issue in Profense Web Application Firewall 2.6.2 and 2.6.3. An attacker could cause malicious script or HTML to run through a vulnerable proxy.html parameter. Business urgency depends on whether this obsolete WAF product is still deployed and reachable. Exposure is likely limited to organizations still running Profense WAF 2.6.2 or 2.6.3. Risk is higher if administrative or management functions are reachable from untrusted networks or used by privileged operators. Treat this as a targeted legacy-technology risk. It is not documented as actively exploited, but an exposed, unsupported WAF management interface could put privileged sessions and security operations at risk. Mitigation focus: Inventory for Profense WAF 2.6.2 and 2.6.3 deployments.; Check vendor or archived advisory guidance for fixed versions or supported upgrade paths.; Restrict access to WAF management interfaces to trusted administrative networks..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.