© 2026 vulntracker.io

CVE-2008-3821

N/A

Published: January 16, 2009 at 09:00 PM UTC

Updated: June 16, 2026 at 10:56 PM UTC

1 product affected across 1 vendorIOS

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 5%

Description

Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.0 12.0da 12.0db 12.0dc 12.0s 12.0sc 12.0sl 12.0sp 12.0st 12.0sx 12.0sy 12.0sz 12.0t 12.0w 12.0wc 12.0xa 12.0xb 12.0xc 12.0xd 12.0xe 12.0xg 12.0xh 12.0xi 12.0xj 12.0xk 12.0xl 12.0xm 12.0xn 12.0xq 12.0xr 12.0xs 12.0xt 12.0xv 12.1 12.1aa 12.1ax 12.1ay 12.1cx 12.1da 12.1db 12.1dc 12.1eb 12.1ec 12.1eo 12.1eu 12.1ew 12.1ex 12.1ey 12.1ez 12.1ga 12.1gb 12.1t 12.1xa 12.1xb 12.1xc 12.1xd 12.1xe 12.1xf 12.1xg 12.1xh 12.1xi 12.1xj 12.1xl 12.1xm 12.1xp 12.1xq 12.1xr 12.1xs 12.1xt 12.1xu 12.1xv 12.1xw 12.1xx 12.1xy 12.1xz 12.1ya 12.1yb 12.1yc 12.1yd 12.1ye 12.1yf 12.1yh 12.1yi 12.1yj 12.2 12.2b 12.2bc 12.2bw 12.2bx 12.2by 12.2bz 12.2cx 12.2cy 12.2cz 12.2da 12.2dd 12.2dx 12.2ew 12.2ewa 12.2ex 12.2ey 12.2ez 12.2fx 12.2fy 12.2fz 12.2ixa 12.2ixb 12.2ixc 12.2ixd 12.2ixe 12.2ixf 12.2ixg 12.2ja 12.2jk 12.2mb 12.2mc 12.2s 12.2sb 12.2sbc 12.2se 12.2sea 12.2seb 12.2sec 12.2sed 12.2see 12.2sef 12.2seg 12.2sg 12.2sga 12.2sm 12.2so 12.2sr 12.2sra 12.2srb 12.2su 12.2sv 12.2sva 12.2svc 12.2svd 12.2sve 12.2sw 12.2sx 12.2sxa 12.2sxb 12.2sxd 12.2sxe 12.2sxf 12.2sy 12.2sz 12.2t 12.2tpc 12.2xa 12.2xb 12.2xc 12.2xd 12.2xe 12.2xf 12.2xg 12.2xh 12.2xi 12.2xj 12.2xk 12.2xl 12.2xm 12.2xn 12.2xo 12.2xq 12.2xr 12.2xs 12.2xt 12.2xu 12.2xv 12.2xw 12.2ya 12.2yb 12.2yc 12.2yd 12.2ye 12.2yf 12.2yg 12.2yh 12.2yj 12.2yk 12.2yl 12.2ym 12.2yn 12.2yo 12.2yp 12.2yq 12.2yr 12.2yt 12.2yu 12.2yv 12.2yw 12.2yx 12.2yy 12.2yz 12.2za 12.2zb 12.2zc 12.2zd 12.2ze 12.2zf 12.2zg 12.2zh 12.2zj 12.2zl 12.2zp 12.2zu 12.2zx 12.2zy 12.2zya 12.3 12.3b 12.3bc 12.3bw 12.3ja 12.3jea 12.3jeb 12.3jec 12.3jk 12.3jl 12.3jx 12.3t 12.3tpc 12.3va 12.3xa 12.3xb 12.3xc 12.3xd 12.3xe 12.3xg 12.3xi 12.3xj 12.3xk 12.3xl 12.3xq 12.3xr 12.3xs 12.3xu 12.3xw 12.3xx 12.3xy 12.3xz 12.3ya 12.3yd 12.3yf 12.3yg 12.3yh 12.3yi 12.3yj 12.3yk 12.3ym 12.3yq 12.3ys 12.3yt 12.3yu 12.3yx 12.3yz 12.3za 12.4 12.4ja 12.4jda 12.4jk 12.4jl 12.4jma 12.4jmb 12.4jx 12.4md 12.4mr 12.4sw 12.4t 12.4xa 12.4xb 12.4xc 12.4xd 12.4xe 12.4xg 12.4xj 12.4xk 12.4xp 12.4xt 12.4xv 12.4xw

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html

References (12)

Third Party Advisoryx_refsource_JVNVDB Entry

Source: [email protected]

http://jvn.jp/en/jp/JVN28344798/index.html

VDB Entryx_refsource_OSVDBBroken Link

Source: [email protected]

http://osvdb.org/51393

VDB Entryx_refsource_OSVDBBroken Link

Source: [email protected]

http://osvdb.org/51394

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/33461

Third Party Advisoryx_refsource_SREASON

Source: [email protected]

http://securityreason.com/securityalert/4916

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://securitytracker.com/id?1021598

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html

x_refsource_MISCExploit

Source: [email protected]

http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19

CVSS

4.3MEDIUM[email protected]

Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card