Cisco · Adaptive Security Appliance (ASA)
CVE-2014-2120
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Nedir
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
CISA: Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
Ne yapmalı
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 3 Aralık 2024
Cisco için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 24 May 2022 | SNMP Buffer Overflow | Adaptive Security Appliance (ASA) | Yüksek 8,8 | 88% |
| 24 May 2022 | CLI Remote Code Execution | Adaptive Security Appliance (ASA) | Yüksek 7,8 | 23% |
| 3 Kas 2021 | Denial-of-Service | Adaptive Security Appliance (ASA) | Yüksek 7,5 | 99,9% |
| 14 Eki 2026 | Relative Path Traversal | Secure Email Gateway | Kritik 9,8 | 2,2% |
| 30 Eyl 2026 | Hex Encoding | Catalyst SD-WAN Manager | Kritik 9,8 | 39% |
| 16 Eyl 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Kritik 10,0 | 76% |
| 14 Eyl 2026 | SQL Injection | Secure Email Gateway | Kritik 9,8 | 30% |
| 9 Eyl 2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Kritik 10,0 | 88% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.