VULNERABILITY INTELLIGENCE

CVE-2008-3821

CVSS score4.3 NONE
EPSS probability5.45%
CISA KEVNot currently listed
Published2009-01-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references