CVE

Id
38655  
CVE No.
CVE-2009-1220  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.  
Phase
Assigned (20090401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423313 38655 CVE-2009-1220 BUGTRAQ:20090331 Cisco ASA5520 Web VPN Host Header XSS  View
423314 38655 CVE-2009-1220 URL:http://www.securityfocus.com/archive/1/archive/1/502313/100/0/threaded  View
423315 38655 CVE-2009-1220 BUGTRAQ:20090424 RE: Cisco ASA5520 Web VPN Host Header XSS  View
423316 38655 CVE-2009-1220 URL:http://www.securityfocus.com/archive/1/502932  View
423317 38655 CVE-2009-1220 FULLDISC:20090331 Cisco ASA5520 Web VPN Host Header XSS  View
423318 38655 CVE-2009-1220 URL:http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0478.html  View
423319 38655 CVE-2009-1220 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=17950  View
423320 38655 CVE-2009-1220 BID:34307  View
423321 38655 CVE-2009-1220 URL:http://www.securityfocus.com/bid/34307  View
423322 38655 CVE-2009-1220 SECTRACK:1022122  View
423323 38655 CVE-2009-1220 URL:http://www.securitytracker.com/id?1022122  View
423324 38655 CVE-2009-1220 VUPEN:ADV-2009-1169  View
423325 38655 CVE-2009-1220 URL:http://www.vupen.com/english/advisories/2009/1169  View
423326 38655 CVE-2009-1220 XF:asa5520-webvpn-xss(49528)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44923 JVNDB-2009-005930 vsp stats プロセッサの vsp-core/pub/themes/bismarck/gamestat.php における SQL インジェクションの脆弱性 vsp stats プロセッサの vsp-core/pub/themes/bismarck/gamestat.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-1224 38655 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005930.html  View