Vulnerability Description
Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Asa 5580 | <= 8.1\(1\) |
Related Weaknesses (CWE)
References
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
FAQ
What is CVE-2009-4910?
CVE-2009-4910 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary we...
How severe is CVE-2009-4910?
CVE-2009-4910 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4910?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Asa 5580.