CVE-2009-4910 - Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418

Published Jun 29, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 0.85%

Description

Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4873
Advisory

Link	Providers	Tags
http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html		x_refsource_CONFIRMPatch
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4873		Advisory