CVEvulnerability
CVE-2014-0668
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.
Affected configurations
• cisco secure access control system
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/102256 osvdb.org
- http://secunia.com/advisories/56543 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0668 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32489 Vendor Advisory
- http://www.securityfocus.com/bid/65016 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029654 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90561 exchange.xforce.ibmcloud.com
- http://osvdb.org/102256 osvdb.org
- http://secunia.com/advisories/56543 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0668 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32489 Vendor Advisory
- http://www.securityfocus.com/bid/65016 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029654 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90561 exchange.xforce.ibmcloud.com