Unrated severityNVD Advisory· Published Jun 25, 2009· Updated Jun 16, 2026

CVE-2009-1202

Description

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

Affected products

Cisco Systems, Inc./Cisco Adaptive Security Appliance4 versions
cpe:2.3:a:cisco:adaptive_security_appliance:8.0\(4\):*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:cisco:adaptive_security_appliance:8.0\(4\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*
Cisco Systems, Inc./Adaptive Security Appliance (ASA) Softwarellm-fuzzy
Range: 8.0(4), 8.1.2, 8.2.1

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2009-1202

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions