The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA), a microprogramming-based network device, allows attackers to execute XSS attacks.

🗓️ 10 Jan 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

A vulnerability in Cisco ASA web server allows remote XSS attacks due to poor website structure protections.

Reporter	Title	Published	Views	Family All 17
ATTACKERKB	CVE-2014-2120	19 Mar 201400:00	–	attackerkb
Circl	CVE-2014-2120	12 Nov 202418:40	–	circl
CISA KEV Catalog	Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability	12 Nov 202400:00	–	cisa_kev
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	12 Nov 202412:00	–	cisa
Cisco	Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability	18 Mar 201416:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance WebVPN Login Page XSS (cisco-sa-CVE-2014-2120)	18 Dec 202400:00	–	nessus
CVE	CVE-2014-2120	19 Mar 201401:00	–	cve
Cvelist	CVE-2014-2120	19 Mar 201401:00	–	cvelist
NVD	CVE-2014-2120	19 Mar 201401:15	–	nvd
OpenVAS	Cisco ASA WebVPN Login Page XSS Vulnerability (cisco-sa-CVE-2014-2120, CSCun19025) - Active Check	22 Feb 201600:00	–	openvas

Vulners

Node

cisco_systems adaptive_security_applianceMatch8.0.2.11

OR

cisco_systems adaptive_security_applianceMatch8.0.4

OR

cisco_systems adaptive_security_applianceMatch8.0.3

OR

cisco_systems adaptive_security_applianceMatch8.0.2

OR

cisco_systems adaptive_security_applianceMatch8.0.1.2

OR

cisco_systems adaptive_security_applianceMatch8.0.4.25

OR

cisco_systems adaptive_security_applianceMatch8.0.4.28

OR

cisco_systems adaptive_security_applianceMatch8.0.4.33

OR

cisco_systems adaptive_security_applianceMatch8.0.4.32

OR

cisco_systems adaptive_security_applianceMatch8.0.5

OR

cisco_systems adaptive_security_applianceMatch8.0.2.15

OR

cisco_systems adaptive_security_applianceMatch8.0.3.6

OR

cisco_systems adaptive_security_applianceMatch8.0.3.12

OR

cisco_systems adaptive_security_applianceMatch8.0.3.19

OR

cisco_systems adaptive_security_applianceMatch8.0.4.3

OR

cisco_systems adaptive_security_applianceMatch8.0.4.9

OR

cisco_systems adaptive_security_applianceMatch8.0.4.16

OR

cisco_systems adaptive_security_applianceMatch8.0.4.23

OR

cisco_systems adaptive_security_applianceMatch8.0.4.31

OR

cisco_systems adaptive_security_applianceMatch8.0.5.20

OR

cisco_systems adaptive_security_applianceMatch8.0.5.23

OR

cisco_systems adaptive_security_applianceMatch8.0.5.25

OR

cisco_systems adaptive_security_applianceMatch8.0.5.27

OR

cisco_systems adaptive_security_applianceMatch8.0.5.28

OR

cisco_systems adaptive_security_applianceMatch8.0.5.31

OR

cisco_systems adaptive_security_applianceMatch8.2.0.45

OR

cisco_systems adaptive_security_applianceMatch8.2.1

OR

cisco_systems adaptive_security_applianceMatch8.2.2

OR

cisco_systems adaptive_security_applianceMatch8.2.2.10

OR

cisco_systems adaptive_security_applianceMatch8.2.3

OR

cisco_systems adaptive_security_applianceMatch8.2.4

OR

cisco_systems adaptive_security_applianceMatch8.2.1.11

OR

cisco_systems adaptive_security_applianceMatch8.2.2.9

OR

cisco_systems adaptive_security_applianceMatch8.2.2.12

OR

cisco_systems adaptive_security_applianceMatch8.2.2.16

OR

cisco_systems adaptive_security_applianceMatch8.2.4.1

OR

cisco_systems adaptive_security_applianceMatch8.2.4.4

OR

cisco_systems adaptive_security_applianceMatch8.2.5

OR

cisco_systems adaptive_security_applianceMatch8.2.5.13

OR

cisco_systems adaptive_security_applianceMatch8.2.5.22

OR

cisco_systems adaptive_security_applianceMatch8.2.5.26

OR

cisco_systems adaptive_security_applianceMatch8.2.2.17

OR

cisco_systems adaptive_security_applianceMatch8.2.5.33

OR

cisco_systems adaptive_security_applianceMatch8.2.5.40

OR

cisco_systems adaptive_security_applianceMatch8.2.5.41

OR

cisco_systems adaptive_security_applianceMatch8.2.5.46

OR

cisco_systems adaptive_security_applianceMatch8.1.1

OR

cisco_systems adaptive_security_applianceMatch8.1.2

OR

cisco_systems adaptive_security_applianceMatch8.1.2.15

OR

cisco_systems adaptive_security_applianceMatch8.1.2.16

OR

cisco_systems adaptive_security_applianceMatch8.1.2.19

OR

cisco_systems adaptive_security_applianceMatch8.1.2.23

OR

cisco_systems adaptive_security_applianceMatch8.1.2.24

OR

cisco_systems adaptive_security_applianceMatch8.1.2.50

OR

cisco_systems adaptive_security_applianceMatch8.1.1.6

OR

cisco_systems adaptive_security_applianceMatch8.1.2.13

OR

cisco_systems adaptive_security_applianceMatch8.1.2.49

OR

cisco_systems adaptive_security_applianceMatch8.1.2.55

OR

cisco_systems adaptive_security_applianceMatch8.1.2.56

OR

cisco_systems adaptive_security_applianceMatch8.3.1.1

OR

cisco_systems adaptive_security_applianceMatch8.3.1

OR

cisco_systems adaptive_security_applianceMatch8.3.2

OR

cisco_systems adaptive_security_applianceMatch8.3.2.23

OR

cisco_systems adaptive_security_applianceMatch8.3.2.25

OR

cisco_systems adaptive_security_applianceMatch8.3.1.4

OR

cisco_systems adaptive_security_applianceMatch8.3.1.6

OR

cisco_systems adaptive_security_applianceMatch8.3.2.4

OR

cisco_systems adaptive_security_applianceMatch8.3.2.13

OR

cisco_systems adaptive_security_applianceMatch8.3.2.31

OR

cisco_systems adaptive_security_applianceMatch8.3.2.33

OR

cisco_systems adaptive_security_applianceMatch8.3.2.34

OR

cisco_systems adaptive_security_applianceMatch8.3.2.37

OR

cisco_systems adaptive_security_applianceMatch8.3.2.39

OR

cisco_systems adaptive_security_applianceMatch8.4.1

OR

cisco_systems adaptive_security_applianceMatch8.4.2

OR

cisco_systems adaptive_security_applianceMatch8.4.1.3

OR

cisco_systems adaptive_security_applianceMatch8.4.1.11

OR

cisco_systems adaptive_security_applianceMatch8.4.2.8

OR

cisco_systems adaptive_security_applianceMatch8.4.3

OR

cisco_systems adaptive_security_applianceMatch8.4.3.8

OR

cisco_systems adaptive_security_applianceMatch8.4.3.9

OR

cisco_systems adaptive_security_applianceMatch8.4.4

OR

cisco_systems adaptive_security_applianceMatch8.4.4.1

OR

cisco_systems adaptive_security_applianceMatch8.4.4.3

OR

cisco_systems adaptive_security_applianceMatch8.4.4.5

OR

cisco_systems adaptive_security_applianceMatch8.4.4.9

OR

cisco_systems adaptive_security_applianceMatch8.4.5

OR

cisco_systems adaptive_security_applianceMatch8.4.5.6

OR

cisco_systems adaptive_security_applianceMatch8.4.6

OR

cisco_systems adaptive_security_applianceMatch8.4.2.1

OR

cisco_systems adaptive_security_applianceMatch8.4.7

OR

cisco_systems adaptive_security_applianceMatch9.0.1

OR

cisco_systems adaptive_security_applianceMatch9.0.2

OR

cisco_systems adaptive_security_applianceMatch9.0.2.10

OR

cisco_systems adaptive_security_applianceMatch9.0.3

OR

cisco_systems adaptive_security_applianceMatch9.0.3.6

OR

cisco_systems adaptive_security_applianceMatch9.1.1

OR

cisco_systems adaptive_security_applianceMatch9.1.1.4

OR

cisco_systems adaptive_security_applianceMatch9.1.2

OR

cisco_systems adaptive_security_applianceMatch9.1.3

OR

cisco_systems adaptive_security_applianceMatch9.1.2.8

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120
web	www.web.nvd.nist.gov/view/vuln/detail

19 Jan 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 36.1

CVSS 26.4

EPSS0.14029

Adaptive Security Appliance Web server Cross site scripting Protections lacking