CVE-2013-3421 in Secure Access Control System

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 06/05/2013
• Divulgazione: 12/07/2013
• Moderazione: accettato
• Voce: VDB-9536
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00931
• KEV: no
• Attività: molto basso
• Settore: Police, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-3421
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3421
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-3421/