CVEvulnerability
CVE-2014-8012
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.
Affected configurations
• cisco adaptive security appliance software
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8012 Vendor Advisory
- http://www.securitytracker.com/id/1031395 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8012 Vendor Advisory
- http://www.securitytracker.com/id/1031395 www.securitytracker.com