XSS in Cisco Router And Security Device Manager

CVE-2010-0594

Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (54.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Router_and_security_device_manager — versions 2.5
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@cisco.com (x_refsource_JVNDB, third-party-advisory)
psirt@cisco.com (x_refsource_JVN, third-party-advisory)