Signature Detail
Short Name |
HTTP:XSS:HTML-SCRIPT-HTTP-HDR |
|---|---|
Severity |
High |
Recommended |
No |
Category |
HTTP |
Keywords |
HTML Script Tag Embedded in HTTP Header |
Release Date |
2015/03/16 |
Update Number |
2475 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: HTML Script Tag Embedded in HTTP Header
This signature detects cross site scripting attacks. Attackers can create a malicious Web site that includes HTML embedded in the hyperlinks, which might violate site security settings. Attackers can then view the Web cookies from a target computer. Web cookies typically contain sensitive information such as usernames, passwords, credit card numbers, social security numbers, and bank account numbers.