← CVE Radar
CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
6.1 MEDIUMEPSS 22.55%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.1 | MEDIUM | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| 5.4 | MEDIUM | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| 4.3 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:N/I:P/A:N |
CISA required action
⚡ Known exploited · remediation due Dec 3, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2014-2120
- Status
- Analyzed
- Assigner (CNA)
- cisco
- Published
- Mar 19, 2014
- Last modified
- 2026-06-17 00:06 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
ciscoadaptive security appliance software0 version ranges
No version detail published.
References
- tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120
- securityfocus.com http://www.securityfocus.com/bid/66290
- securitytracker.com http://www.securitytracker.com/id/1029935
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-2120