{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco IOS 11.x ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.x ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS R12.x.",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS R11.x ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans l\u0027affichage d\u0027un extrait de la\nm\u00e9moire (dump). Cette vuln\u00e9rabilit\u00e9 permet \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027ins\u00e9rer du contenu dynamique qui sera alors ex\u00e9cut\u00e9 par le\nnavigateur des clients consultant la page.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-12-02T00:00:00",
  "last_revision_date": "2005-12-02T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco ID 68322 du 01 d\u00e9cembre 2005 :",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051201-http.shtml"
    }
  ],
  "reference": "CERTA-2005-AVI-481",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-12-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le serveur HTTP de CISCO IOS permet \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027injecter des scripts malicieusement\ncontruits.\n",
  "title": "Vuln\u00e9rabilit\u00e9 du serveur HTTP de CISCO IOS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de CISCO",
      "url": null
    }
  ]
}