XSS in Cisco Adaptive_security_appliance
CVE-2013-3414
Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.005 (67.2th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- 95660 (x_refsource_OSVDB, vdb-entry)
- cisco-asa-cve20133414-xss(85949) (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- 1028831 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
- 20130724 Cisco ASA Software Cross-Site Scripting Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)