CVE-2014-2118 Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web....
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime security manager | <= 9.2.1-2 | No fix listed |
| cisco prime security manager | = 9.0 | No fix listed |
| cisco prime security manager | = 9.1 | No fix listed |
| cisco prime security manager | = 9.1.2-29 | No fix listed |
| cisco prime security manager | = 9.1.2-42 | No fix listed |
| cisco prime security manager | = 9.1.3-8 | No fix listed |
| cisco prime security manager | = 9.1.3-10 | No fix listed |
| cisco prime security manager | = 9.1.3-13 | No fix listed |
| cisco prime security manager | = 9.2 | No fix listed |
| cisco prime security manager | = 9.2.1-1 | No fix listed |
References
- 20140327 Cisco Prime Security Manager Cross-Site Scripting Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 66488 vdb-entry
- 1029968 vdb-entry