Unscored CVE-2014-3265 EUVD-2014-3278GHSA-5xwm-pgq9-vqgc

Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows rem…

Published May 20, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.

References

1030260 vdb-entry
20140519 Cisco Security Manager AUS Cross-Site Scripting Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34274