CVE-2008-3821

Published Jan 16, 2009 CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Description
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Aug 7, 2024, 9:53 AM
Reserved
Aug 27, 2008, 12:00 AM
Status
Modified
Published
Jan 16, 2009, 9:30 PM
Modified
Jun 16, 2026, 10:56 PM