CVE-2014-2120

MEDIUMCISA KEV

6.1

Description

Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

CVE Details

CVSS v3.1 Score6.1

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published3/19/2014

Last Modified4/21/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorCisco

ProductAdaptive Security Appliance (ASA)

Vulnerability NameCisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

KEV Date Added2024-11-12

Remediation Due Date2024-12-03

Ransomware UseUnknown

Affected Products

cisco:adaptive_security_appliance_software

Weaknesses (CWE)

CWE-79CWE-79

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120(psirt@cisco.com)

http://www.securityfocus.com/bid/66290(psirt@cisco.com)

http://www.securitytracker.com/id/1029935(psirt@cisco.com)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2120(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/66290(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1029935(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-2120(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.