CVE-2010-0594

2022-10-0316:21:13

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-0594

cross-site scripting

xss

cisco

router

security device manager

sdm

bug id

csctb38467

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467.

Affected configurations

NVD

Node

ciscorouter_and_security_device_manager

ciscorouter_and_security_device_managerMatch2.5

CPENameOperatorVersion
cisco:router_and_security_device_managercisco router and security device managereq*
cisco:router_and_security_device_managercisco router and security device managereq2.5

CPE	Name	Operator	Version
cisco:router_and_security_device_manager	cisco router and security device manager	eq	*
cisco:router_and_security_device_manager	cisco router and security device manager	eq	2.5