[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBDDL9fjO3fmhTrVVOY4XaIxvWaaKjzwTVVIVJx69Uls":3,"g5a-risk:CVE-2007-3489":132},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":89,"weaknesses":90,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":94,"seoMetadata":95,"configurations":120,"relatedVendorCves":128,"notableEvents":129},"CVE-2007-3489","What is CVE-2007-3489?","Cross-site request forgery (CSRF) vulnerability in pop\u002FWizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and swupass parameters, which adds an administrator account.  NOTE: the CSRF attack has no timing window because there is no logout capability in the management interface.","Cross-site request forgery (CSRF) vulnerability in pop\u002FWizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Po...","2007-06-29T18:30:00","2026-06-16T22:42:08.963",9.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":4,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","COMPLETE","",null,"HIGH",8.6,10,false,[],0.03313,[34,34,34,34,34,34,34],"Critical",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"checkpoint","vpn-1_utm_edge","7.0.33","cpe:2.3:h:checkpoint:vpn-1_utm_edge:7.0.33:*:utm_edge:*:*:*:*:*",1,[45,49,55,59,63,67,71,75,77,79,81,83,85,87],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fosvdb.org\u002F37645","Osvdb",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F25853","Secunia",[53,54],"Patch","Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F2848","Securityreason",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.louhi.fi\u002Fadvisory\u002Fcheckpoint_070626.txt","Louhi",[],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F472371\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2007\u002F2363","Vupen",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F35103","Ibmcloud",[],{"url":46,"source":47,"tags":76},[],{"url":50,"source":51,"tags":78},[53,54],{"url":56,"source":57,"tags":80},[],{"url":60,"source":61,"tags":82},[],{"url":64,"source":65,"tags":84},[],{"url":68,"source":69,"tags":86},[],{"url":72,"source":73,"tags":88},[],14,[91],{"id":92,"name":92,"description":93},"Unknown","NVD-CWE-Other",[],{"title":96,"metaDescription":97,"keywords":98,"canonicalUrl":99,"structuredData":100},"What is CVE-2007-3489? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2007-3489, a critical severity cyber security vulnerability from 2007. Cross-site request forgery (CSRF) vulnerability in pop\u002FW...","CVE-2007-3489, CVE-2007-3489 vulnerability, CVE-2007-3489 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2007, CVSS score, exploit, patch, remediation, checkpoint security, vpn-1_utm_edge vulnerability","\u002Fwhat-is\u002Fcve-2007-3489",{"@context":101,"@type":102,"headline":96,"description":97,"datePublished":10,"dateModified":11,"author":103,"publisher":107,"about":111,"mainEntityOfPage":115,"articleSection":118,"keywords":119},"https:\u002F\u002Fschema.org","TechArticle",{"@type":104,"name":105,"url":106},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":104,"name":105,"url":106,"logo":108},{"@type":109,"url":110},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":112,"name":6,"description":113,"additionalType":114},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":116,"@id":117},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2007-3489","Cybersecurity","CVE-2007-3489, CVE-2007-3489 vulnerability, CVE-2007-3489 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[121],{"Operator":28,"Negate":28,"Nodes":122},[123],{"Operator":124,"Negate":32,"CPEMatch":125},"OR",[126],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":127,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1C50F6BF-BB6A-47CB-A44E-5ED693C611C6",[],[],{"lastModified":11,"cacheTime":131,"version":22},1792332942193,{"score":133,"band":134,"action":135,"scoredAt":136},54,"Medium","Plan remediation","2026-10-17T06:35:15.26792+00:00"]