{"cvss":0.0,"datePublished":"2024-11-12","dateUpdated":"2024-11-12","description":"Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.","dueDate":"2024-12-03","id":"CVE-2014-2120","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120","product":"Adaptive Security Appliance (ASA)","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","vendor":"Cisco"}