Description
Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.
References
- 95660 vdb-entry
- cisco-asa-cve20133414-xss(85949) vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30214
- 1028831 vdb-entry
- 20130724 Cisco ASA Software Cross-Site Scripting Vulnerability vendor-advisory