CVEvulnerability
CVE-2014-3265
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.
Affected configurations
• cisco security manager 4.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3265 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34274 Vendor Advisory
- http://www.securitytracker.com/id/1030260 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3265 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34274 Vendor Advisory
- http://www.securitytracker.com/id/1030260 Third Party Advisory, VDB Entry