CVE Watch—

CVE-2014-2120

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CVSS

—

No CVSS

EPSS

22.6%

p98

KEV

YES

Nov 12, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

18.8%EPSS · 30 days22.6%

2026-09-172026-10-15

KEV catalog record

Product

Cisco / Adaptive Security Appliance (ASA)

Vulnerability

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

Added to KEV

Nov 12, 2024

Remediate by

Dec 3, 2024

Known ransomware use

Summary description

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-02967.5 HIG

100.0%

KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability66d CVE-2016-6366—

99.8%

KEV—80Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability—CVE-2016-6367—

97.7%

KEV—79Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability—