CVE-2014-8022

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2015-01-15

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Identity Services Engine Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8022
• http://www.securityfocus.com/bid/72083
• http://www.securitytracker.com/id/1031560
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100664
• https://tools.cisco.com/security/center/viewAlert.x?alertId=37045