CVE-2008-3821

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

5.45% chance of exploitation in the next 30 days, 93rd percentile

Published

2009-01-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32723

Security advisories

• http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html
• http://jvn.jp/en/jp/JVN28344798/index.html
• http://secunia.com/advisories/33461
• http://securityreason.com/securityalert/4916
• http://securitytracker.com/id?1021598
• http://www.securityfocus.com/bid/33260
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47947

References

• CVE Record
• NVD entry