CVE-2014-0668

2014-01-2002:00:00

cisco

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.

References

osvdb.org/102256

secunia.com/advisories/56543

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0668

tools.cisco.com/security/center/viewAlert.x?alertId=32489

www.securityfocus.com/bid/65016

www.securitytracker.com/id/1029654

exchange.xforce.ibmcloud.com/vulnerabilities/90561