Description
Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/66488
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=33542
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1029968
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2118
Scores
EPSS
0.0181
EPSS Percentile
76.3%
Details
CWE
CWE-79
Status
published
Products (10)
cisco/prime_security_manager
9.0
cisco/prime_security_manager
9.1
cisco/prime_security_manager
9.1.2-29
cisco/prime_security_manager
9.1.2-42
cisco/prime_security_manager
9.1.3-8
cisco/prime_security_manager
9.1.3-10
cisco/prime_security_manager
9.1.3-13
cisco/prime_security_manager
9.2
cisco/prime_security_manager
9.2.1-1
cisco/prime_security_manager
< 9.2.1-2
Published
Mar 27, 2014
Tracked Since
Feb 18, 2026