NVD

Id
48490  
Name
CVE-2009-1202  
Description
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-25  
Modified Date
2010-05-04  
Seq
2009-1202  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244451 48490 CVE-2009-1202 20090624 Trustwave"s SpiderLabs Security Advisory TWSL2009-002  View
244452 48490 CVE-2009-1202 35480  View
244453 48490 CVE-2009-1202 1022457  View
244454 48490 CVE-2009-1202 ADV-2009-1713  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40864 JVNDB-2009-001870 Cisco Adaptive Security Appliances (ASA) デバイスの WebVPN におけるクロスサイトスクリプティングの脆弱性 Cisco Adaptive Security Appliances (ASA) デバイス上の WebVPN には、特定の防御機構を回避され、クロスサイトスクリプティングを誘導される脆弱性が存在します。 CVE-2009-1202 38633 CVE-2009-1202 48490 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001870.html 2009-06-25 2009-08-12 View