CVEvulnerability

CVE-2016-6436

6.1 MEDIUM Published 2016-10-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.

Affected configurations

• cisco hostscan engine 3.0.08062 • cisco hostscan engine 3.0.08066 • cisco hostscan engine 3.1.01065 • cisco hostscan engine 3.1.02016 • cisco hostscan engine 3.1.02026 • cisco hostscan engine 3.1.02040 • cisco hostscan engine 3.1.02043 • cisco hostscan engine 3.1.03103 • cisco hostscan engine 3.1.03104 • cisco hostscan engine 3.1.04060 • cisco hostscan engine 3.1.04063 • cisco hostscan engine 3.1.04075 • cisco hostscan engine 3.1.04082 • cisco hostscan engine 3.1.05152 • cisco hostscan engine 3.1.05160 • cisco hostscan engine 3.1.05163 • cisco hostscan engine 3.1.05170 • cisco hostscan engine 3.1.05178 • cisco hostscan engine 3.1.05182 • cisco hostscan engine 3.1.05183 • cisco hostscan engine 3.1.06073 • cisco hostscan engine 3.1.14018

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References