Vulnerability record · CVE-2004-1789 · published 31 December 2004

CVE-2004-1789: Zyxel zywall10 vulnerability

Zyxel · Zywall10

Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.

4.3 CVSS 2.0 Medium EPSS 11% · top 4.2%

4.3CVSS 2.0 base score

11%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References, 8 tagged exploit

16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Zywall10 Zyxel

References

Link	Tags
http://secunia.com/advisories/10574
http://securitytracker.com/id?1008644	Exploit
http://www.osvdb.org/12793
http://www.osvdb.org/3443	Exploit
http://www.securityfocus.com/archive/1/349085	Exploit
http://www.securityfocus.com/bid/9373	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/14163
http://secunia.com/advisories/10574
http://securitytracker.com/id?1008644	Exploit
http://www.osvdb.org/12793
http://www.osvdb.org/3443	Exploit
http://www.securityfocus.com/archive/1/349085	Exploit
http://www.securityfocus.com/bid/9373	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/14163

Track CVE-2004-1789 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2002-0438Zyxel zywall10 vulnerabilityZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MA…EPSS 1.8%26 Jul 2002

Source: NIST National Vulnerability Database (record CVE-2004-1789), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.