CVE-2006-3101

medium

Description

Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27166

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3098

http://www.vupen.com/english/advisories/2006/2384

http://www.securityfocus.com/bid/18449

http://www.securityfocus.com/archive/1/437480/100/0/threaded

http://www.securityfocus.com/archive/1/437441/100/0/threaded

http://www.osvdb.org/26531

http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html

http://securitytracker.com/id?1016317

http://securityreason.com/securityalert/1116

http://secunia.com/advisories/20699

Details

Source: Mitre, NVD

Published: 2006-06-21

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N