CVE-2014-3265 in Cisco Security Manager
摘要 (英语)
Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.
预定
2014-05-07
披露
2014-05-20
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 13287 | Cisco Security Manager Auto Update Server 跨网站脚本 | 79 | 高 | Unavailable | CVE-2014-3265 |