CVE-2009-1202

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection…

published June 25, 2009

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01984 · 80.4th percentile
Published
2009-06-25T17:00Z
EPSS history
Timeline
  • 25 JUN 17:00Z
    WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection…
    cvelistv5