CVE-2009-4910
Cisco ASA 5580 < 8.1(2) - Cross-Site Scripting via WebVPN Portal
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.
References (1)
Core 1
Core References
Patch x_refsource_confirm
http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
Scores
EPSS
0.0086
EPSS Percentile
54.6%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/asa_5580
< 8.1\(1\)
Published
Jun 29, 2010
Tracked Since
Feb 18, 2026