Description
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019.
References
- 71946 vdb-entry
- cisco-secureacs-cve20148028-xss(100553) vdb-entry
- 20150108 Cisco Secure Access Control Server Multiple Cross-Site Scripting Vulnerabilities vendor-advisory
- 1031515 vdb-entry
- 62159 third-party-advisory