NVD

Id
48508  
Name
CVE-2009-1220  
Description
Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-04-01  
Modified Date
2009-05-06  
Seq
2009-1220  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244555 48508 CVE-2009-1220 20090331 Cisco ASA5520 Web VPN Host Header XSS  View
244556 48508 CVE-2009-1220 http://tools.cisco.com/security/center/viewAlert.x?alertId=17950  View
244557 48508 CVE-2009-1220 20090424 RE: Cisco ASA5520 Web VPN Host Header XSS  View
244558 48508 CVE-2009-1220 20090331 Cisco ASA5520 Web VPN Host Header XSS  View
244559 48508 CVE-2009-1220 34307  View
244560 48508 CVE-2009-1220 1022122  View
244561 48508 CVE-2009-1220 ADV-2009-1169  View
244562 48508 CVE-2009-1220 asa5520-webvpn-xss(49528)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40514 JVNDB-2009-001520 Cisco Adaptive Security Appliances (ASA) 上で稼動する WebVPN の +webvpn+/index.html におけるクロスサイトスクリプティングの脆弱性 Cisco Adaptive Security Appliances (ASA) 上で稼動する WebVPN の +webvpn+/index.html に対するリクエストの処理には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1220 38651 CVE-2009-1220 48508 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001520.html 2009-04-01 2009-06-30 View