CVE Feed

    Dashboard / CVE / CVE-2012-3088

    CVE-2012-3088

    Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.

    Published:Sep 16, 2012
    Last Modified:Apr 11, 2025
    EPS:Sep 16, 2012
    EPSS Score:0.00484
    CVSS Score:9.3

    Affected Products

    Vendor
    Cisco
    Product
    Anyconnect Secure Mobility Client

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-3432 (CVSS 5.6) — A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow…
    CVE-2024-20474 (CVSS 4.3) — A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al…
    CVE-2023-20241 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20240 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20178 (CVSS 7.8) — A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a…
    CVE-2021-40124 (CVSS 6.7) — A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Wind…
    CVE-2021-34788 (CVSS 7) — A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux a…
    CVE-2021-1567 (CVSS 7) — A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allo…
    CVE-2021-1568 (CVSS 5.5) — A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local att…
    CVE-2021-1519 (CVSS 4.7) — A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Sof…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High