CVE-2006-3101

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-21 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.

Affected products

Cisco Secure Access Control Server: 2.3

References

http://secunia.com/advisories/20699
http://securityreason.com/securityalert/1116
http://securitytracker.com/id?1016317
http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html
http://www.osvdb.org/26531
http://www.securityfocus.com/archive/1/437441/100/0/threaded
http://www.securityfocus.com/archive/1/437480/100/0/threaded
http://www.securityfocus.com/bid/18449
http://www.vupen.com/english/advisories/2006/2384
https://exchange.xforce.ibmcloud.com/vulnerabilities/27166
http://secunia.com/advisories/20699
http://securityreason.com/securityalert/1116

Get alerted when CVE-2006-3101 or the next vulnerability affects your stack