CVE-2014-0663 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, a...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control system | All versions | No fix listed |
References
- 101914 vdb-entry
- 56382 third-party-advisory
- 20140110 Cisco Secure Access Control System Cross-Site Scripting Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 64773 third-party-advisory vdb-entry
- 1029595 third-party-advisory vdb-entry
- cisco-acs-cve20140663-xss(90232) vdb-entry