CVEvulnerability
CVE-2011-3317
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtr78192.
Affected configurations
• cisco secure access control server 5.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/49101 secunia.com
- http://www.cisco.com/web/software/282766937/37718/Acs-5-2-0-26-9-Readme.txt www.cisco.com
- http://www.securityfocus.com/bid/53436 www.securityfocus.com
- http://secunia.com/advisories/49101 secunia.com
- http://www.cisco.com/web/software/282766937/37718/Acs-5-2-0-26-9-Readme.txt www.cisco.com
- http://www.securityfocus.com/bid/53436 www.securityfocus.com