CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-03-19
Cisco ASA WebVPN Login Page Cross-Site Scripting (XSS) Vulnerability (CVE-2014-2120) Analysis and Mitigation Guide
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software with WebVPN (SSL VPN) feature enabled
[Impact] Remote attackers can execute arbitrary JavaScript or HTML code in the context of the user's browser session, leading to session hijacking or credential theft
[Mitigation] Apply official Cisco software updates, restrict WebVPN access via ACLs, and monitor HTTP request logs