CVE-2014-2120

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120

Remediation deadline: December 3, 2024

Description

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Timeline

Published:November 12th, 2024 12:00 AM

Last modified:November 12th, 2024 12:00 AM

Added to KEV:November 12th, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Cisco

Products

Adaptive Security Appliance (ASA)

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute