CVEvulnerability
CVE-2013-3421
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.
Affected configurations
• cisco secure access control system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3421 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85622 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3421 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85622 exchange.xforce.ibmcloud.com