CVE-2006-3073
Estado: ModificadaBaja (2.6)—
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that "WebVPN full-network-access mode" is not affected, despite the claims by the original researcher.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
- Puntuación base: 2.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.73%
- Percentil entre todas las CVEs puntuadas: 77
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/20644
- http://securitytracker.com/id?1016252
- http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml
- http://www.osvdb.org/26453
- http://www.osvdb.org/26454
- http://www.securityfocus.com/archive/1/436479/30/0/threaded
- http://www.securityfocus.com/bid/18419
- http://www.vupen.com/english/advisories/2006/2331
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27086
- http://secunia.com/advisories/20644
- http://securitytracker.com/id?1016252
- http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml
- http://www.osvdb.org/26453
- http://www.osvdb.org/26454
- http://www.securityfocus.com/archive/1/436479/30/0/threaded
- http://www.securityfocus.com/bid/18419
- http://www.vupen.com/english/advisories/2006/2331
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27086
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-3073",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-06-19T10:02:00.000",
"references": [
{
"url": "http://secunia.com/advisories/20644",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1016252",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/26453",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/26454",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/436479/30/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/18419",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2331",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27086",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/20644",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1016252",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sr-20060613-webvpn-xss.shtml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/26453",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/26454",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/436479/30/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/18419",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2331",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27086",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that \"WebVPN full-network-access mode\" is not affected, despite the claims by the original researcher."
},
{
"lang": "es",
"value": "Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en WebVPN en la serie Cisco VPN 3000 y concentradores Cisco ASA 5500 Series Adaptive Security Appliances (ASA), cuando se encuentra en el modo de WebVPN sin cliente, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro domain en (1) dnserror.html y (2) connecterror.html, también conocido como bugid CSCsd81095 (VPN3k) y CSCse48193 (ASA). NOTA: El fabricante indica que \"WebVPN full-network-access mode\" no se ve afectada, a pesar de las alegaciones formuladas por el investigador original."
}
],
"lastModified": "2026-06-16T22:26:20.513",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "891B8FA4-B602-42C5-A94F-8C60BBF7A7D1"
},
{
"criteria": "cpe:2.3:h:cisco:asa_5500:7.0\\(4\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "083B3C00-AE54-48D7-A11B-E5BFE5607CF8"
},
{
"criteria": "cpe:2.3:h:cisco:asa_5500:7.0.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "635851C6-E383-415A-9123-270E205E0762"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "923949D1-06EC-462F-A3BC-FCAB448042A2"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "901B1838-7169-41E5-80EF-29BB680BF937"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDAEAA5F-0A98-48B7-8012-9B9909243135"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB38834B-E4AB-43F4-888B-14B088C95594"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23F8059B-3968-4D63-B1B3-74E545C918D1"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "701CDA0D-F932-4251-B484-8F20F0AE9003"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E674AA43-905E-40E0-A70F-77D05C62C18D"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645AB682-2965-4C8D-B323-AB510E424407"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76F7F019-A0A4-49CD-BB28-24BF7725AC89"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "175CD875-3402-4B06-A3FA-7DFFCBB44056"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C9017BB-5848-4361-ABB9-C69FB3AB90FC"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C544E523-15E5-4CE5-8113-53454F5D9973"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B09F6EBD-C3FC-4680-BE31-A766D863237D"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B68705AB-A133-401F-9F41-64594E071816"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9092680-E154-4EAB-A2D5-B692073F894E"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADFC9764-5BF5-449F-9200-5569C13F8309"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D953DA9F-B54E-4941-85BE-48933C98DB55"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E298AD-26AC-4E1D-83D8-5C2016CC6559"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0.5.b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B71DAF71-5763-44D8-AD1E-5ADE8BC15120"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B35B6FA9-E504-4CE3-B171-815291A812CC"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.5.b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFA54782-93A8-47BE-863D-89CA3678BF6E"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67F66A10-246D-447B-941F-F1175684F0D6"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82435757-D892-4298-9176-5EC1FEC93037"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D03F5D3F-6FB1-4A25-B544-D3C973F35DD9"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A90348C-94E2-4F04-A887-E7EFFC1ACF12"
},
{
"criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.7.1.f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F5E136E-9215-46A8-A40A-AE964C588A38"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}