CVEvulnerability
CVE-2014-3266
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.
Affected configurations
• cisco security manager (<= 4.6)
• cisco security manager 4.0
• cisco security manager 4.0.1
• cisco security manager 4.1
• cisco security manager 4.2
• cisco security manager 4.3
• cisco security manager 4.4
• cisco security manager 4.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/58923 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3266 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34340 Vendor Advisory
- http://www.securityfocus.com/bid/67569 www.securityfocus.com
- http://secunia.com/advisories/58923 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3266 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34340 Vendor Advisory
- http://www.securityfocus.com/bid/67569 www.securityfocus.com