CVE-2014-3265
Cisco Security Manager - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.
Scores
EPSS
0.0043
EPSS Percentile
62.3%
Details
CWE
CWE-79
Status
published
Products (2)
cisco/security_manager
n/a/n/a
Published
May 20, 2014
Tracked Since
Feb 18, 2026