CVE-2016-6436

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote…

published October 6, 2016

CVSS
—
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00765 · 54.7th percentile
Published
2016-10-06T10:00Z
EPSS history
Timeline
  • 06 OCT 10:00Z
    Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote…
    cvelistv5