CVE-2014-2120
medium · 6.1Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Added 2024-11-12Remediation due 2024-12-03
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
6.1
CVSS
18.8%
EPSS (exploit prob.)
97th
EPSS percentile
2014-03-19
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | adaptive_security_appliance_software | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120
- http://www.securityfocus.com/bid/66290
- http://www.securitytracker.com/id/1029935
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120
- http://www.securityfocus.com/bid/66290
- http://www.securitytracker.com/id/1029935
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-2120
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-2120