CVE-2014-8021 in AnyConnect Secure Mobility Client

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2014-10-08

Divulgación

2015-02-03

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
69033	Cisco AnyConnect Secure Mobility Client secuencias de comandos en sitios cruzados	79	No probado	Arreglo oficial	CVE-2014-8021

Fuentes

• MITRE
• NVD
• CVE Details