NVD

Id
61756  
Name
CVE-2006-3073  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that "WebVPN full-network-access mode" is not affected, despite the claims by the original researcher.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-19  
Modified Date
2011-03-07  
Seq
2006-3073  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319623 61756 CVE-2006-3073 1016252  View
319624 61756 CVE-2006-3073 20060613 WebVPN Cross-Site Scripting Vulnerability  View
319625 61756 CVE-2006-3073 20060608 SSL VPNs and security  View
319626 61756 CVE-2006-3073 18419  View
319627 61756 CVE-2006-3073 ADV-2006-2331  View
319628 61756 CVE-2006-3073 cisco-webvpn-xss(27086)  View

Related JVN