CVE-2008-0533

Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control…

published March 14, 2008

CVSS

—

EPSS

29%

Percentile

98.1

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an argument located immediately after the Help argument, and possibly unspecified other vectors.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.28789 · 98.1th percentile
Published: 2008-03-14T20:00Z

EPSS history

Timeline

14 MAR 20:00Z
Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control…
cvelistv5