CVE-2006-4909: Cisco Guard Ddos Mitigation Appliance

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh.

Affected products

• Cisco Guard Ddos Mitigation Appliance: up to and including 5.1\(5\)

Published 2006-09-21. Last modified 2026-06-16.