CVE-2014-8021 in AnyConnect Secure Mobility Client
Summary
Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/08/2014
Disclosure
02/03/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69033 | Cisco AnyConnect Secure Mobility Client cross site scripting | 79 | Unproven | Official fix | CVE-2014-8021 |