CVE-2009-1201
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.8%
from disclosure to weapon0 days
Published on NVDJun 25
1st PoCMay 24
exploitation probability
8.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33055⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.