Description
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.
References
- 20150514 Cisco Access Control Server File Inclusion Vulnerability vendor-advisory
- 1032338 vdb-entry