CVE-2016-6436

Published Oct 6, 2016

Last updated 8 years ago

Overview

Description: Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.
Source: ykramarz@cisco.com
NVD status: Modified

Risk scores

CVSS 3.0

Type: Primary
Base score: 6.1
Impact score: 2.7
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-79

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.0.08062:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2FF4EEC1-59F3-4CA5-ABC9-9B7DBCEDDD28"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.0.08066:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "43823471-E5F5-45C6-BE33-0FBEF5667DDA"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.01065:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24EB98C1-DBAB-4790-BD27-6D1B7E43011A"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.02016:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2569C651-F1AA-499C-AC4A-DE0F9C3100EF"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.02026:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DC0A446E-5B41-4E11-B3D4-D74295D2B815"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.02040:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8BF9B426-58D2-40A8-A1F4-D526D8025866"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.02043:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C75133FB-F573-4655-BF3B-BDF3A7DB594F"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.03103:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "144542F5-E175-4A0A-AEB3-E74BFC95D5A7"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.03104:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5181568C-E545-48E5-8C79-7A63D8741E6E"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.04060:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4920FFAE-AB66-43A4-A747-F0D2A8D9BC08"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.04063:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C45B3F52-557E-4CC0-91ED-DEE249DEE1F4"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.04075:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24B7CFBE-EC70-4F09-89BD-F13E66651899"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.04082:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F3CD6D0-2D48-49D4-98DF-85460B5D1E64"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05152:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0E28BA6C-FE33-430F-A052-367144F53FFE"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05160:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73B4BDF6-2EF6-47AE-A963-1A51A7704BEC"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05163:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6479F6B-EF4C-49E3-9113-05FD94E78236"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05170:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8B7BC692-5448-4BBC-82F5-8891BA936863"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05178:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EC57DA54-4728-421F-B2DF-2E90B6D88D12"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05182:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CB95422F-E076-4F55-B5B0-07E1057F263D"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.05183:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4EAFDA73-65B5-4F39-B5CD-791269F35538"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.06073:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AE29DE3C-C0C6-4653-B6CF-A3C679C0BCB8"
          },
          {
            "criteria": "cpe:2.3:a:cisco:hostscan_engine:3.1.14018:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D8FBD0D-B7EE-48C4-A150-888CE5AA8DAE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References