← Back

CVE-2008-3821

nvd nist
Published: Jan 16, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

Affected (284)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
284 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 12.0
Ios
Version 12.0da
Ios
Version 12.0db
Ios
Version 12.0dc
Ios
Version 12.0s
Ios
Version 12.0sc
Ios
Version 12.0sl
Ios
Version 12.0sp
Ios
Version 12.0st
Ios
Version 12.0sx
Ios
Version 12.0sy
Ios
Version 12.0sz
Ios
Version 12.0t
Ios
Version 12.0w
Ios
Version 12.0wc
Ios
Version 12.0xa
Ios
Version 12.0xb
Ios
Version 12.0xc
Ios
Version 12.0xd
Ios
Version 12.0xe
Ios
Version 12.0xg
Ios
Version 12.0xh
Ios
Version 12.0xi
Ios
Version 12.0xj
Ios
Version 12.0xk
Ios
Version 12.0xl
Ios
Version 12.0xm
Ios
Version 12.0xn
Ios
Version 12.0xq
Ios
Version 12.0xr
Ios
Version 12.0xs
Ios
Version 12.0xt
Ios
Version 12.0xv
Ios
Version 12.1
Ios
Version 12.1aa
Ios
Version 12.1ax
Ios
Version 12.1ay
Ios
Version 12.1cx
Ios
Version 12.1da
Ios
Version 12.1db
Ios
Version 12.1dc
Ios
Version 12.1eb
Ios
Version 12.1ec
Ios
Version 12.1eo
Ios
Version 12.1eu
Ios
Version 12.1ew
Ios
Version 12.1ex
Ios
Version 12.1ey
Ios
Version 12.1ez
Ios
Version 12.1ga
Ios
Version 12.1gb
Ios
Version 12.1t
Ios
Version 12.1xa
Ios
Version 12.1xb
Ios
Version 12.1xc
Ios
Version 12.1xd
Ios
Version 12.1xe
Ios
Version 12.1xf
Ios
Version 12.1xg
Ios
Version 12.1xh
Ios
Version 12.1xi
Ios
Version 12.1xj
Ios
Version 12.1xl
Ios
Version 12.1xm
Ios
Version 12.1xp
Ios
Version 12.1xq
Ios
Version 12.1xr
Ios
Version 12.1xs
Ios
Version 12.1xt
Ios
Version 12.1xu
Ios
Version 12.1xv
Ios
Version 12.1xw
Ios
Version 12.1xx
Ios
Version 12.1xy
Ios
Version 12.1xz
Ios
Version 12.1ya
Ios
Version 12.1yb
Ios
Version 12.1yc
Ios
Version 12.1yd
Ios
Version 12.1ye
Ios
Version 12.1yf
Ios
Version 12.1yh
Ios
Version 12.1yi
Ios
Version 12.1yj
Ios
Version 12.2
Ios
Version 12.2b
Ios
Version 12.2bc
Ios
Version 12.2bw
Ios
Version 12.2bx
Ios
Version 12.2by
Ios
Version 12.2bz
Ios
Version 12.2cx
Ios
Version 12.2cy
Ios
Version 12.2cz
Ios
Version 12.2da
Ios
Version 12.2dd
Ios
Version 12.2dx
Ios
Version 12.2ew
Ios
Version 12.2ewa
Ios
Version 12.2ex
Ios
Version 12.2ey
Ios
Version 12.2ez
Ios
Version 12.2fx
Ios
Version 12.2fy
Ios
Version 12.2fz
Ios
Version 12.2ixa
Ios
Version 12.2ixb
Ios
Version 12.2ixc
Ios
Version 12.2ixd
Ios
Version 12.2ixe
Ios
Version 12.2ixf
Ios
Version 12.2ixg
Ios
Version 12.2ja
Ios
Version 12.2jk
Ios
Version 12.2mb
Ios
Version 12.2mc
Ios
Version 12.2s
Ios
Version 12.2sb
Ios
Version 12.2sbc
Ios
Version 12.2se
Ios
Version 12.2sea
Ios
Version 12.2seb
Ios
Version 12.2sec
Ios
Version 12.2sed
Ios
Version 12.2see
Ios
Version 12.2sef
Ios
Version 12.2seg
Ios
Version 12.2sg
Ios
Version 12.2sga
Ios
Version 12.2sm
Ios
Version 12.2so
Ios
Version 12.2sr
Ios
Version 12.2sra
Ios
Version 12.2srb
Ios
Version 12.2su
Ios
Version 12.2sv
Ios
Version 12.2sva
Ios
Version 12.2svc
Ios
Version 12.2svd
Ios
Version 12.2sve
Ios
Version 12.2sw
Ios
Version 12.2sx
Ios
Version 12.2sxa
Ios
Version 12.2sxb
Ios
Version 12.2sxd
Ios
Version 12.2sxe
Ios
Version 12.2sxf
Ios
Version 12.2sy
Ios
Version 12.2sz
Ios
Version 12.2t
Ios
Version 12.2tpc
Ios
Version 12.2xa
Ios
Version 12.2xb
Ios
Version 12.2xc
Ios
Version 12.2xd
Ios
Version 12.2xe
Ios
Version 12.2xf
Ios
Version 12.2xg
Ios
Version 12.2xh
Ios
Version 12.2xi
Ios
Version 12.2xj
Ios
Version 12.2xk
Ios
Version 12.2xl
Ios
Version 12.2xm
Ios
Version 12.2xn
Ios
Version 12.2xo
Ios
Version 12.2xq
Ios
Version 12.2xr
Ios
Version 12.2xs
Ios
Version 12.2xt
Ios
Version 12.2xu
Ios
Version 12.2xv
Ios
Version 12.2xw
Ios
Version 12.2ya
Ios
Version 12.2yb
Ios
Version 12.2yc
Ios
Version 12.2yd
Ios
Version 12.2ye
Ios
Version 12.2yf
Ios
Version 12.2yg
Ios
Version 12.2yh
Ios
Version 12.2yj
Ios
Version 12.2yk
Ios
Version 12.2yl
Ios
Version 12.2ym
Ios
Version 12.2yn
Ios
Version 12.2yo
Ios
Version 12.2yp
Ios
Version 12.2yq
Ios
Version 12.2yr
Ios
Version 12.2yt
Ios
Version 12.2yu
Ios
Version 12.2yv
Ios
Version 12.2yw
Ios
Version 12.2yx
Ios
Version 12.2yy
Ios
Version 12.2yz
Ios
Version 12.2za
Ios
Version 12.2zb
Ios
Version 12.2zc
Ios
Version 12.2zd
Ios
Version 12.2ze
Ios
Version 12.2zf
Ios
Version 12.2zg
Ios
Version 12.2zh
Ios
Version 12.2zj
Ios
Version 12.2zl
Ios
Version 12.2zp
Ios
Version 12.2zu
Ios
Version 12.2zx
Ios
Version 12.2zy
Ios
Version 12.2zya
Ios
Version 12.3
Ios
Version 12.3b
Ios
Version 12.3bc
Ios
Version 12.3bw
Ios
Version 12.3ja
Ios
Version 12.3jea
Ios
Version 12.3jeb
Ios
Version 12.3jec
Ios
Version 12.3jk
Ios
Version 12.3jl
Ios
Version 12.3jx
Ios
Version 12.3t
Ios
Version 12.3tpc
Ios
Version 12.3va
Ios
Version 12.3xa
Ios
Version 12.3xb
Ios
Version 12.3xc
Ios
Version 12.3xd
Ios
Version 12.3xe
Ios
Version 12.3xg
Ios
Version 12.3xi
Ios
Version 12.3xj
Ios
Version 12.3xk
Ios
Version 12.3xl
Ios
Version 12.3xq
Ios
Version 12.3xr
Ios
Version 12.3xs
Ios
Version 12.3xu
Ios
Version 12.3xw
Ios
Version 12.3xx
Ios
Version 12.3xy
Ios
Version 12.3xz
Ios
Version 12.3ya
Ios
Version 12.3yd
Ios
Version 12.3yf
Ios
Version 12.3yg
Ios
Version 12.3yh
Ios
Version 12.3yi
Ios
Version 12.3yj
Ios
Version 12.3yk
Ios
Version 12.3ym
Ios
Version 12.3yq
Ios
Version 12.3ys
Ios
Version 12.3yt
Ios
Version 12.3yu
Ios
Version 12.3yx
Ios
Version 12.3yz
Ios
Version 12.3za
Ios
Version 12.4
Ios
Version 12.4ja
Ios
Version 12.4jda
Ios
Version 12.4jk
Ios
Version 12.4jl
Ios
Version 12.4jma
Ios
Version 12.4jmb
Ios
Version 12.4jx
Ios
Version 12.4md
Ios
Version 12.4mr
Ios
Version 12.4sw
Ios
Version 12.4t
Ios
Version 12.4xa
Ios
Version 12.4xb
Ios
Version 12.4xc
Ios
Version 12.4xd
Ios
Version 12.4xe
Ios
Version 12.4xg
Ios
Version 12.4xj
Ios
Version 12.4xk
Ios
Version 12.4xp
Ios
Version 12.4xt
Ios
Version 12.4xv
Ios
Version 12.4xw

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (24)

Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Broken Link
Source: psirt@cisco.com
Broken Link
Source: psirt@cisco.com
Third Party Advisory
Source: psirt@cisco.com
Third Party Advisory
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Exploit
Source: psirt@cisco.com
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Not Applicable
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.