Cisco Adaptive Security Appliance Software WebVPN Information Disclosure Vulnerability

A vulnerability in the WebVPN portal of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to view sensitive information from the affected system. The vulnerability is due to improper input validation in the WebVPN portal. An attacker could exploit this...

PT-2014-4511

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software version 8.4.7.15 and earlier Description A issue in the WebVPN portal allows remote authenticated users to obtain sensitive information via a crafted JavaScript file. This could enable an...

CVE-2014-2112: Improper Input Validation

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

CVE-2014-2120 affects Cisco ASA WebVPN login page, with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via an unspecified parameter (Bug ID CSCun19025). Multiple sources (Cisco advisory, NVD/NIST CVE entry, CISCO-SA, OpenVAS) consistently d...

CVE-2014-2120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025...

CVE-2014-2120

Cross-site scripting XSS vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

Cisco Adaptive Security Appliance WebVPN Login Page Cross-Site Scripting Vulnerability

A vulnerability in the WebVPN login page of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of WebVPN on the Cisco ASA. The vulnerability is due to insufficient input validation of a...

PT-2014-2059 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue is a cross-site scripting XSS vulnerability in the WebVPN login page of Cisco Adaptive Security Appliance ASA Software. This vulnerability...

Cisco ASA WebVPN XSS

According to its self-reported version, the remote Cisco ASA is missing a security patch and is affected by a cross-site scripting vulnerability in the WebVPN portal login page. An attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary scrip...

CVE-2013-3414

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...

CVE-2013-3414

CVE-2013-3414 affects Cisco ASA devices’ WebVPN portal login page. The vulnerability is an XSS flaw in the WebVPN login page caused by insufficient input validation, enabling remote attackers to inject arbitrary script/HTML via a crafted URL. Multiple sources (Cisco advisory, Nessus, CVE records)...

Cisco ASA Software Cross-Site Scripting Vulnerability

A vulnerability in the WebVPN portal login page of the Cisco ASA could allow an unauthenticated, remote attacker to execute cross-site scripting XSS attacks or hijack user sessions. The vulnerability is due to a failure to properly validate user-supplied input in the WebVPN portal login page. An...

CVE-2013-3414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...

Cisco ASA 5500 Series Adaptive Security Appliance Clientless WebVPN Remote Denial of Service Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliance contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the improper handling of user-supplied requests by an affected system when configured to use th...

CVE-2012-2474

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service memory consumption and blank response page by using the clientless WebVPN feature, aka Bug ID CSCth34278...