CVE-2013-3414

Cisco Adaptive Security Appliance Software - Cross-Site Scripting via WebVPN Portal Login Page

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/95660
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85949
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1028831

Scores

EPSS 0.0210
EPSS Percentile 79.8%

Details

CWE
CWE-79
Status published
Products (2)
cisco/adaptive_security_appliance
cisco/adaptive_security_appliance_software
Published Jul 25, 2013
Tracked Since Feb 18, 2026