XSS in Cisco Acs_for_windows
CVE-2008-0533
Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to injec…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.288 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Acs_for_windows
- Cisco Acs_solution_engine
- Cisco User_changeable_password — versions 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@cisco.com (Exploit, vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)