CVE-2012-0340: Cross-site scripting (XSS) vulnerability in the management interface on the Cisco IronPort Encryption Appli...

Security readout for executives and security teams

CVE-2012-0340 is a cross-site scripting issue in the Cisco IronPort Encryption Appliance management interface. If an exposed or reachable admin interface runs software before 6.5.3, an attacker could inject script or HTML into the admin UI. The main business risk is compromise of administrator browser sessions or management actions. Exposure is most likely where Cisco IronPort Encryption Appliance management interfaces are still deployed on software before 6.5.3, especially if reachable from untrusted networks. The provided affected-product metadata is sparse, so asset validation is required. Treat this as a targeted legacy-appliance risk. Prioritize remediation if the product is still deployed or the management interface is broadly reachable. Lack of KEV status lowers urgency, but administrator-session impact makes exposed systems worth prompt attention. Mitigation focus: Upgrade affected Cisco IronPort Encryption Appliance software to 6.5.3 or later.; Check Cisco advisory 25045 for vendor-supported remediation guidance.; Restrict management interface access to trusted admin networks or VPN paths..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.