CVE Watch—

CVE-2014-2120

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CVSS

—

Sem CVSS

EPSS

22.6%

p98

KEV

SIM

12 de nov. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

22.6%EPSS · 30 dias22.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / Adaptive Security Appliance (ASA)

Vulnerabilidade

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

Adicionado ao KEV

12 de nov. de 2024

Corrigir até

3 de dez. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2018-02967.5 ALT

100.0%

KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability86d CVE-2016-6366—

99.8%

KEV—80Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability—CVE-2016-6367—

97.7%

KEV—79Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability—