Lucene search
MitreCVE-2006-4909HistorySep 21, 2006 - 12:07 a.m.
CVE-2006-4909
2006-09-2100:07:00
mitre
web.nvd.nist.gov
20
cve-2006-4909
xss
cisco
ddos
mitigation
appliance
nvd
security vulnerability
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.006
Percentile
78.9%
Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh.
Affected configurations
Node
ciscoguard_ddos_mitigation_applianceRange≤5.1\(5\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | guard_ddos_mitigation_appliance | * | cpe:2.3:h:cisco:guard_ddos_mitigation_appliance:*:*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco Guard Enables Cross Site Scripting
2006-09-20 16:00:00
cvelist
cvelist
CVE-2006-4909
2006-09-21 00:00:00
nvd
nvd
CVE-2006-4909
2006-09-21 00:07:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.006
Percentile
78.9%
Related for CVE-2006-4909