Cisco : Security Vulnerabilities, CVEs, Published In January 2014 (XSS)
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine (ISE) 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064.
Max CVSS
4.3
EPSS Score
0.23%
Published
2014-01-29
Updated
2018-01-03
Cross-site scripting (XSS) vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038.
Max CVSS
4.3
EPSS Score
0.26%
Published
2014-01-29
Updated
2018-01-03
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.
Max CVSS
4.3
EPSS Score
0.18%
Published
2014-01-25
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-01-22
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-01-20
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-01-10
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358.
Max CVSS
4.3
EPSS Score
0.18%
Published
2014-01-08
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.
Max CVSS
4.3
EPSS Score
0.18%
Published
2014-01-10
Updated
2016-09-09
8 vulnerabilities found