CVE-2014-2120: Cisco Adaptive Security Appliance (ASA): aktif olarak istismar edilen açık

Açıklama (NVD)

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Özet bilgiler

EPSS

%22,56 (yüzdelik 98)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-11-12 · Son tarih: 2024-12-03

Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu