Adaptive Security Appliance
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:adaptive_security_appliance:8.0\(4\):*:*:*:*:*:*:*
part: a version: 8.0(4) update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Adaptive Security Appliance (ff8ce86c-d71d-5d1d-8ce3-e9b1962abaa3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-1203 |
vulnerable | 2026-06-08 04:51:13.772014 |
Details available
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.
Published: 2009-06-25T17:00:00.000Z
Updated: 2024-08-07T05:04:48.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1202 |
vulnerable | 2026-06-08 04:51:13.771595 |
Details available
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.
Published: 2009-06-25T17:00:00.000Z
Updated: 2024-08-07T05:04:49.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1201 |
vulnerable | 2026-06-08 04:51:13.762747 |
Details available
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.
Published: 2009-06-25T17:00:00.000Z
Updated: 2024-08-07T05:04:49.338Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.