CVE-2014-0663

Опубликовано: 10 янв. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.

Ссылки

http://osvdb.org/101914
http://secunia.com/advisories/56382
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0663
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32403
Vendor Advisory
http://www.securityfocus.com/bid/64773
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029595
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90232
http://osvdb.org/101914
http://secunia.com/advisories/56382
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0663
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32403
Vendor Advisory
http://www.securityfocus.com/bid/64773
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029595
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90232

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:secure_access_control_system:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00561

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-997x-r83r-3cmw

github

больше 3 лет назад