Unscored severity · published Jun 21, 2006
CVE-2006-3101
Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2)…
–
CVSS
24%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)24.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Secure Access Control Server · Cisco
2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3101
Patch
http://secunia.com/advisories/20699
securityreason.com
http://securityreason.com/securityalert/1116
Exploit
http://securitytracker.com/id?1016317
Patch
http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html
www.osvdb.org
http://www.osvdb.org/26531
www.securityfocus.com
http://www.securityfocus.com/archive/1/437441/100/0/threaded
More from Secure Access Control Server
–
CVE-2015-6349
Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject…
–
CVE-2015-6348
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC…
–
CVE-2015-6347
The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or…
–
CVE-2015-6346
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL
–
CVE-2015-6345
SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a…