2012-09-15

2012-09-16

2012-09-17

All (1) Critical (1) High (2) Medium (11) Low (2)

CVE-2012-3088 CRITICAL Act Now

Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Cisco Anyconnect Secure Mobility Client

NVD

CVSS 2.0

9.3

EPSS

0.5%