CVEvulnerability
CVE-2013-6974
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.
Affected configurations
• cisco secure access control system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/101894 osvdb.org
- http://secunia.com/advisories/56353 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974 Vendor Advisory
- http://www.securityfocus.com/bid/64752 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029594 Third Party Advisory, VDB Entry
- http://osvdb.org/101894 osvdb.org
- http://secunia.com/advisories/56353 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974 Vendor Advisory
- http://www.securityfocus.com/bid/64752 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029594 Third Party Advisory, VDB Entry