CVE-2013-6974 Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, a...
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control system | All versions | No fix listed |
References
- 101894 vdb-entry
- 56353 third-party-advisory
- 20140109 Cisco Secure Access Control System Cross-Site Scripting Vulnerability vendor-advisory
- 64752 third-party-advisory vdb-entry
- 1029594 third-party-advisory vdb-entry