XSS in Cisco Adaptive Security Appliance Software
CVE-2014-8012
Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance_software
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)