CVE-2008-3821

Published Jan 16, 2009 CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Aug 7, 2024, 9:53 AM
Reserved
Aug 27, 2008, 12:00 AM
Status
Modified
Published
Jan 16, 2009, 9:30 PM
Modified
Jun 16, 2026, 10:56 PM