CVEvulnerability

CVE-2014-2151

4.0 MEDIUM Published 2014-06-18 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-06-18
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520.

Affected configurations

• cisco adaptive security appliance software (<= 8.4\(7.15\))

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2151 Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34627 Vendor Advisory
http://www.securityfocus.com/bid/68063 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030445 Broken Link, Third Party Advisory, VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2151 Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34627 Vendor Advisory
http://www.securityfocus.com/bid/68063 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030445 Broken Link, Third Party Advisory, VDB Entry