{"api_version":"1","generated_at":"2026-07-23T11:09:49+00:00","cve":"CVE-2006-3101","urls":{"html":"https://cve.report/CVE-2006-3101","api":"https://cve.report/api/cve/CVE-2006-3101.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3101","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3101"},"summary":{"title":"CVE-2006-3101","description":"Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-06-21 01:02:00","updated_at":"2018-10-18 16:45:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://www.vupen.com/english/advisories/2006/2384","name":"ADV-2006-2384","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27166","name":"cisco-acs-logonproxy-xss(27166)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/437441/100/0/threaded","name":"20060615 Cisco Secure ACS Cross Site Scripting Vulnerability.","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html","name":"20060615 Cisco Secure ACS for UNIX Cross Site Scripting Vulnerability","refsource":"CISCO","tags":["Patch"],"title":"Cisco Security Response to: Cisco Secure ACS for UNIX Cross Site Scripting Vulnerability  [Cisco Secure Access Control Server for Unix] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/437480/100/0/threaded","name":"20060617 RE: Cisco Secure ACS Cross Site Scripting Vulnerability.","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1116","name":"1116","refsource":"SREASON","tags":[],"title":"Cisco Secure ACS Cross Site Scripting Vulnerability. - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016317","name":"1016317","refsource":"SECTRACK","tags":["Exploit","Patch"],"title":"SecurityTracker.com Archives - Cisco Secure ACS for UNIX Input Validation Flaw in 'LogonProxy.cgi' Permits Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/26531","name":"26531","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/20699","name":"20699","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Cisco Secure ACS for Unix Cross-Site Scripting Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/18449","name":"18449","refsource":"BID","tags":["Exploit","Patch"],"title":"Cisco Secure ACS LoginProxy.CGI Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3101","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3101","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3101","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_access_control_server","cpe6":"2.3","cpe7":"*","cpe8":"unix","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3101","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_access_control_server","cpe6":"2.3","cpe7":"*","cpe8":"unix","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3101","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"cisco-acs-logonproxy-xss(27166)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27166"},{"name":"20699","refsource":"SECUNIA","url":"http://secunia.com/advisories/20699"},{"name":"1016317","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016317"},{"name":"20060617 RE: Cisco Secure ACS Cross Site Scripting Vulnerability.","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/437480/100/0/threaded"},{"name":"18449","refsource":"BID","url":"http://www.securityfocus.com/bid/18449"},{"name":"20060615 Cisco Secure ACS Cross Site Scripting Vulnerability.","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/437441/100/0/threaded"},{"name":"26531","refsource":"OSVDB","url":"http://www.osvdb.org/26531"},{"name":"ADV-2006-2384","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2384"},{"name":"1116","refsource":"SREASON","url":"http://securityreason.com/securityalert/1116"},{"name":"20060615 Cisco Secure ACS for UNIX Cross Site Scripting Vulnerability","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html"}]}},"nvd":{"publishedDate":"2006-06-21 01:02:00","lastModifiedDate":"2018-10-18 16:45:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cisco:secure_access_control_server:2.3:*:unix:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3101","Ordinal":"18426","Title":"CVE-2006-3101","CVE":"CVE-2006-3101","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3101","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3101","Ordinal":"2","NoteData":"2006-06-20","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3101","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}