CVE-2009-1162

Published: Jun 5, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter.

Affected (16)

Products: Cisco: Ironport Asyncos, Ironport Email Security Appliances

Cisco

2 products

Ironport Asyncos

Ironport Email Security Appliances

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Cisco Ironport Asyncos	Version 6.0.0-754
Cisco Ironport Asyncos	Version 6.0.0-757
Cisco Ironport Asyncos	Version 6.1.0-301
Cisco Ironport Asyncos	Version 6.1.0-304
Cisco Ironport Asyncos	Version 6.1.0-306
Cisco Ironport Asyncos	Version 6.1.0-307
Cisco Ironport Asyncos	Version 6.1.5-110
Cisco Ironport Asyncos	Version 6.1.6-003
Cisco Ironport Asyncos	Version 6.3.5-003
Cisco Ironport Asyncos	Version 6.3.6-003
Cisco Ironport Asyncos	Version 6.5.0-405
Cisco Ironport Asyncos	Version 6.5.1-005
Cisco Ironport Asyncos	Version 6.6.4.0-273
Cisco Ironport Email Security Appliances	All versions
Cisco Ironport Email Security Appliances	All versions
Cisco Ironport Email Security Appliances	All versions