CVE-2014-8012

Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2014-12-18

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Adaptive Security Appliance Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8012
• http://www.securitytracker.com/id/1031395