CVEvulnerability
CVE-2014-0663
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.
Affected configurations
• cisco secure access control system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/101914 osvdb.org
- http://secunia.com/advisories/56382 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0663 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32403 Vendor Advisory
- http://www.securityfocus.com/bid/64773 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029595 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90232 exchange.xforce.ibmcloud.com
- http://osvdb.org/101914 osvdb.org
- http://secunia.com/advisories/56382 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0663 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32403 Vendor Advisory
- http://www.securityfocus.com/bid/64773 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029595 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90232 exchange.xforce.ibmcloud.com