← Vulnerability feed

Vulnerability record · CVE-2009-1201 · published 25 June 2009

CVE-2009-1201: Cisco adaptive security appliance cross-site scripting vulnerability

Cisco · Adaptive Security Appliance

Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.

4.3 CVSS 2.0 Medium EPSS 8.8% · top 5.0% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
8.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/35511
http://www.securityfocus.com/archive/1/504516/100/0/threaded
http://www.securityfocus.com/bid/35476 Exploit
http://www.securitytracker.com/id?1022457
http://www.vupen.com/english/advisories/2009/1713
https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt
http://secunia.com/advisories/35511
http://www.securityfocus.com/archive/1/504516/100/0/threaded
http://www.securityfocus.com/bid/35476 Exploit
http://www.securitytracker.com/id?1022457
http://www.vupen.com/english/advisories/2009/1713
https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt

Track CVE-2009-1201 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2021-34793Cisco adaptive security appliance vulnerabilityA vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in tr…EPSS 0.58%8.6CVE-2020-3572Cisco adaptive security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software …EPSS 1.8%8.6CVE-2020-3436Cisco adaptive security appliance unrestricted file upload vulnerabilityA vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allo…EPSS 1.9%8.6CVE-2020-3304Cisco adaptive security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an u…EPSS 3.9%7.8CVE-2013-3382Cisco adaptive security appliance improper input validation vulnerabilityThe Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive …EPSS 1.9%7.8CVE-2013-1150Cisco adaptive security appliance software improper authentication vulnerabilityThe authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31),…EPSS 2.1%7.8CVE-2013-1152Cisco adaptive security appliance software vulnerabilityCisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload…EPSS 1.9%7.8CVE-2011-0394Cisco adaptive security appliance vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2009-1201), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.