Lucene search

K
cvelistMitreCVELIST:CVE-2009-1201
HistoryJun 25, 2009 - 5:00 p.m.

CVE-2009-1201

2009-06-2517:00:00
mitre
www.cve.org
4

AI Score

6

Confidence

High

EPSS

0.004

Percentile

73.9%

Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN[‘process’] to the name of a crafted function, aka Bug ID CSCsy80694.

AI Score

6

Confidence

High

EPSS

0.004

Percentile

73.9%