CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2014-2120
Medium (6.1) in Cisco Adaptive Security Appliance (ASA). In CISA KEV since 2024-11-12. EPSS 23% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
Severity
- EPSS
- 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2024-11-12, due 2024-12-03
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:adaptive_security_appliance_software