CVEvulnerability

CVE-2009-1202

4.3 MEDIUM Published 2009-06-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

Affected configurations

• cisco adaptive security appliance 8.0\(4\) • cisco adaptive security appliance 8.1.2 • cisco adaptive security appliance 8.2.1 • cisco adaptive security appliance

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References