Unscored CVE-2014-0663 EUVD-2014-0694GHSA-997x-r83r-3cmw

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject…

Published Jan 10, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=32403
1029595 vdb-entry
101914 vdb-entry
64773 vdb-entry
cisco-acs-cve20140663-xss(90232) vdb-entry
56382 third-party-advisory
20140110 Cisco Secure Access Control System Cross-Site Scripting Vulnerability vendor-advisory