CVE-2009-1202

no score yetEPSS 2.0%

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-06-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:adaptive_security_appliance

References

http://secunia.com/advisories/35511
http://www.securityfocus.com/archive/1/504516/100/0/threaded
http://www.securityfocus.com/bid/35480
http://www.securitytracker.com/id?1022457
http://www.vupen.com/english/advisories/2009/1713

Check your stack JSON