© 2026 vulntracker.io

CVE-2005-3921

N/A

Published: November 30, 2005 at 11:00 AM UTC

Updated: June 16, 2026 at 10:17 PM UTC

1 product affected across 1 vendorIOS

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages. NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

v ≤ 12.312.3(10)12.3(10c)12.3(10d)12.3(10e)12.3(11)12.3(11)t 12.3(11)t4 12.3(11)t5 12.3(11)t6 12.3(11)t8 12.3(11)t9 12.3(11)xl 12.3(11)xl3 12.3(11)yf 12.3(11)yf2 12.3(11)yf3 12.3(11)yf4 12.3(11)yj 12.3(11)yk 12.3(11)yk1 12.3(11)yk2 12.3(11)yl 12.3(11)yn 12.3(11)yr 12.3(11)ys 12.3(11)ys1 12.3(11)yw 12.3(12)12.3(12b)12.3(12e)12.3(13)12.3(13a)12.3(13a)bc 12.3(13a)bc1 12.3(13b)12.3(14)t 12.3(14)t2 12.3(14)t4 12.3(14)t5 12.3(14)ym4 12.3(14)yq 12.3(14)yq1 12.3(14)yq3 12.3(14)yq4 12.3(14)yt 12.3(14)yt1 12.3(14)yu 12.3(14)yu1 12.3(15)12.3(15b)12.3(16)12.3(1a)12.3(2)ja 12.3(2)ja5 12.3(2)jk 12.3(2)jk1 12.3(2)t3 12.3(2)t8 12.3(2)xa4 12.3(2)xa5 12.3(2)xc1 12.3(2)xc2 12.3(2)xc3 12.3(2)xc4 12.3(2)xe3 12.3(2)xe4 12.3(3e)12.3(3h)12.3(3i)12.3(4)eo1 12.3(4)ja 12.3(4)ja1 12.3(4)t 12.3(4)t1 12.3(4)t2 12.3(4)t3 12.3(4)t4 12.3(4)t8 12.3(4)tpc11a 12.3(4)xd 12.3(4)xd1 12.3(4)xd2 12.3(4)xe4 12.3(4)xg1 12.3(4)xg2 12.3(4)xg4 12.3(4)xg5 12.3(4)xh 12.3(4)xk 12.3(4)xk1 12.3(4)xk3 12.3(4)xk4 12.3(4)xq 12.3(4)xq1 12.3(5)12.3(5)b1 12.3(5a)12.3(5a)b 12.3(5a)b2 12.3(5a)b5 12.3(5b)12.3(5c)12.3(5e)12.3(5f)12.3(6)12.3(6a)12.3(6d)12.3(6e)12.3(6f)12.3(7)ja 12.3(7)ja1 12.3(7)jx 12.3(7)t 12.3(7)t10 12.3(7)t12 12.3(7)t4 12.3(7)t8 12.3(7)t9 12.3(7)xi3 12.3(7)xi4 12.3(7)xi7 12.3(7)xr3 12.3(7)xr4 12.3(7)xr6 12.3(7.7)12.3(8)t11 12.3(8)t4 12.3(8)t7 12.3(8)t8 12.3(8)t9 12.3(8)xu2 12.3(8)xy4 12.3(8)xy5 12.3(8)xy6 12.3(8)ya1 12.3(8)yd 12.3(8)yf 12.3(8)yg 12.3(8)yg1 12.3(8)yg2 12.3(8)yg3 12.3(8)yh 12.3(8)yi 12.3(8)yi1 12.3(8)yi3 12.3(9)12.3(9a)bc 12.3(9a)bc2 12.3(9a)bc6 12.3(9a)bc7 12.3(9d)12.3(9e)12.3b 12.3bc 12.3bw 12.3ja 12.3jk 12.3jx 12.3t 12.3tpc 12.3xa 12.3xb 12.3xc 12.3xd 12.3xe 12.3xf 12.3xg 12.3xh 12.3xi 12.3xj 12.3xk 12.3xl 12.3xm 12.3xn 12.3xq 12.3xr 12.3xs 12.3xt 12.3xu 12.3xv 12.3xw 12.3xx 12.3xy 12.3xz 12.3ya 12.3yb 12.3yc 12.3yd 12.3ye 12.3yf 12.3yg 12.3yh 12.3yi 12.3yj 12.3yk 12.3yl 12.3ym 12.3yn 12.3yq 12.3yr 12.3ys 12.3yt 12.3yu 12.3yw 12.3yx 12.4 12.4(1)12.4(1b)12.4(1c)12.4(2)mr 12.4(2)mr1 12.4(2)t 12.4(2)t1 12.4(2)t2 12.4(2)xa 12.4(2)xb 12.4(3a)12.4(3b)12.4(4)t 12.4(5)12.4mr 12.4t 12.4xa 12.4xb

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (12)

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/17780

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/18528

Third Party Advisoryx_refsource_SREASON

Source: [email protected]

http://securityreason.com/securityalert/227

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://securitytracker.com/id?1015275

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml

Third Party Advisoryx_refsource_IDEFENSE

Source: [email protected]

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=372

x_refsource_MISCExploitVendor Advisory

Source: [email protected]

http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/cisco/index.html

Mailing Listx_refsource_BUGTRAQ

Source: [email protected]

http://www.securityfocus.com/archive/1/417916/100/0/threaded

CVSS

2.6LOW[email protected]

Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card