Unrated severityNVD Advisory· Published Feb 3, 2010· Updated Apr 29, 2026
CVE-2010-0440
CVE-2010-0440
Description
Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.
Affected products
3cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*range: >=8.1,<8.1\(2.7\)
- cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*range: >=8.0,<8.0\(5\)
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- tools.cisco.com/security/center/viewAlert.xnvdPatchVendor Advisory
- www.coresecurity.com/content/cisco-secure-desktop-xssnvdExploitThird Party Advisory
- www.securityfocus.com/bid/37960nvdExploitThird Party AdvisoryVDB Entry
- secunia.com/advisories/38397nvdThird Party Advisory
- www.securityfocus.com/archive/1/509290/100/0/threadednvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2010/0273nvdThird Party Advisory
News mentions
0No linked articles in our index yet.