CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0440

Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.355

EPSS Ranking 96.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-0440

Cisco » Adaptive Security Appliance Software » Version: 8.1

cpe:2.3:a:cisco:adaptive_security_appliance_software:8.1
Cisco » Secure Desktop » Version: N/A

cpe:2.3:a:cisco:secure_desktop:-
Cisco » Secure Desktop » Version: 3.0_base

cpe:2.3:a:cisco:secure_desktop:3.0_base
Cisco » Secure Desktop » Version: 3.1

cpe:2.3:a:cisco:secure_desktop:3.1
Cisco » Secure Desktop » Version: 3.1.0.31

cpe:2.3:a:cisco:secure_desktop:3.1.0.31
Cisco » Secure Desktop » Version: 3.1.1

cpe:2.3:a:cisco:secure_desktop:3.1.1
Cisco » Secure Desktop » Version: 3.1.1.27

cpe:2.3:a:cisco:secure_desktop:3.1.1.27
Cisco » Secure Desktop » Version: 3.1.1.33

cpe:2.3:a:cisco:secure_desktop:3.1.1.33
Cisco » Secure Desktop » Version: 3.1.1.45

cpe:2.3:a:cisco:secure_desktop:3.1.1.45
Cisco » Secure Desktop » Version: 3.1_base

cpe:2.3:a:cisco:secure_desktop:3.1_base
Cisco » Secure Desktop » Version: 3.2

cpe:2.3:a:cisco:secure_desktop:3.2
Cisco » Secure Desktop » Version: 3.2.0.136

cpe:2.3:a:cisco:secure_desktop:3.2.0.136
Cisco » Secure Desktop » Version: 3.2.1

cpe:2.3:a:cisco:secure_desktop:3.2.1
Cisco » Secure Desktop » Version: 3.2.1.103

cpe:2.3:a:cisco:secure_desktop:3.2.1.103
Cisco » Secure Desktop » Version: 3.2.1.126

cpe:2.3:a:cisco:secure_desktop:3.2.1.126
Cisco » Secure Desktop » Version: 3.2_base

cpe:2.3:a:cisco:secure_desktop:3.2_base
Cisco » Secure Desktop » Version: 3.3

cpe:2.3:a:cisco:secure_desktop:3.3
Cisco » Secure Desktop » Version: 3.3.0.118

cpe:2.3:a:cisco:secure_desktop:3.3.0.118
Cisco » Secure Desktop » Version: 3.3.0.151

cpe:2.3:a:cisco:secure_desktop:3.3.0.151
Cisco » Secure Desktop » Version: 3.3_base

cpe:2.3:a:cisco:secure_desktop:3.3_base
Cisco » Secure Desktop » Version: 3.4

cpe:2.3:a:cisco:secure_desktop:3.4
Cisco » Secure Desktop » Version: 3.4.0373

cpe:2.3:a:cisco:secure_desktop:3.4.0373
Cisco » Secure Desktop » Version: 3.4.1

cpe:2.3:a:cisco:secure_desktop:3.4.1
Cisco » Secure Desktop » Version: 3.4.1108

cpe:2.3:a:cisco:secure_desktop:3.4.1108
Cisco » Secure Desktop » Version: 3.4.2

cpe:2.3:a:cisco:secure_desktop:3.4.2
Cisco » Secure Desktop » Version: 3.4.2048

cpe:2.3:a:cisco:secure_desktop:3.4.2048
Cisco » Secure Desktop » Version: 3.4_base

cpe:2.3:a:cisco:secure_desktop:3.4_base
Cisco » Asa 5500 » Version: N/A

cpe:2.3:h:cisco:asa_5500:-
Cisco » Adaptive Security Appliance Software » Version: 8.0

cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0
Cisco » Adaptive Security Appliance Software » Version: 8.0(2)

cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0(2)
Cisco » Adaptive Security Appliance Software » Version: 8.0(3)

cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0(3)
Cisco » Adaptive Security Appliance Software » Version: 8.0(4)

cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0(4)
Cisco » Adaptive Security Appliance Software » Version: 8.2

cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0440

Products

Pricing

Contact Us