CVE-2014-2120 in ASA
Résumé (Anglaise)
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
25/02/2014
Divulgation
18/03/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 13406 | Cisco ASA WebVPN Login logon.html cross site scripting | 79 | Attaqué | Correctif officiel | CVE-2014-2120 |