CVE-2014-8012
Cisco Adaptive Security Appliance Software - Cross-Site Scripting via WebVPN Portal Login Page Cookie Attributes
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031395
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8012
Scores
EPSS
0.0093
EPSS Percentile
57.0%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/adaptive_security_appliance_software
Published
Dec 18, 2014
Tracked Since
Feb 18, 2026