CVE-2014-8028 Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified param...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control system | All versions | No fix listed |
References
- 62159 third-party-advisory
- 20150108 Cisco Secure Access Control Server Multiple Cross-Site Scripting Vulnerabilities vendor-advisory
- 71946 vdb-entry
- 1031515 vdb-entry
- cisco-secureacs-cve20148028-xss(100553) vdb-entry