Lucene search
CiscoCISCO-SA-20130725-CVE-2013-3414HistoryJul 25, 2013 - 1:23 p.m.
Cisco ASA Software Cross-Site Scripting Vulnerability
2013-07-2513:23:54
tools.cisco.com
12
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
57.7%
A vulnerability in the WebVPN portal login page of the Cisco ASA could
allow an unauthenticated, remote attacker to execute cross-site
scripting (XSS) attacks or hijack user sessions.
The vulnerability is
due to a failure to properly validate user-supplied input in the WebVPN
portal login page. An attacker could exploit this vulnerability by
convincing a user to click a crafted URL.
Cisco has confirmed this vulnerability in a security notice and software updates are available.
To exploit the vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.
Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch7.0
ORciscoadaptive_security_appliance_softwareMatch7.1
ORciscoadaptive_security_appliance_softwareMatch7.2
ORciscoadaptive_security_appliance_softwareMatch8.0
ORciscoadaptive_security_appliance_softwareMatch8.2
ORciscoadaptive_security_appliance_softwareMatch8.1
ORciscoadaptive_security_appliance_softwareMatch8.3
ORciscoadaptive_security_appliance_softwareMatch8.4
ORciscoadaptive_security_appliance_softwareMatch8.5
ORciscoadaptive_security_appliance_softwareMatch8.6
ORciscoadaptive_security_appliance_softwareMatch8.7
ORciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
ORciscoadaptive_security_appliance_softwareMatch7.0.1
ORciscoadaptive_security_appliance_softwareMatch7.0.1.4
ORciscoadaptive_security_appliance_softwareMatch7.0.4
ORciscoadaptive_security_appliance_softwareMatch7.0.4.2
ORciscoadaptive_security_appliance_softwareMatch7.0.2
ORciscoadaptive_security_appliance_softwareMatch7.0.3
ORciscoadaptive_security_appliance_softwareMatch7.0.7.1
ORciscoadaptive_security_appliance_softwareMatch7.0.8
ORciscoadaptive_security_appliance_softwareMatch7.0.7
ORciscoadaptive_security_appliance_softwareMatch7.0.6
ORciscoadaptive_security_appliance_softwareMatch7.0.5
ORciscoadaptive_security_appliance_softwareMatch7.0.5.12
ORciscoadaptive_security_appliance_softwareMatch7.0.6.4
ORciscoadaptive_security_appliance_softwareMatch7.0.6.8
ORciscoadaptive_security_appliance_softwareMatch7.0.6.18
ORciscoadaptive_security_appliance_softwareMatch7.0.6.22
ORciscoadaptive_security_appliance_softwareMatch7.0.6.26
ORciscoadaptive_security_appliance_softwareMatch7.0.6.29
ORciscoadaptive_security_appliance_softwareMatch7.0.6.32
ORciscoadaptive_security_appliance_softwareMatch7.0.7.4
ORciscoadaptive_security_appliance_softwareMatch7.0.7.9
ORciscoadaptive_security_appliance_softwareMatch7.0.7.12
ORciscoadaptive_security_appliance_softwareMatch7.0.8.2
ORciscoadaptive_security_appliance_softwareMatch7.0.8.8
ORciscoadaptive_security_appliance_softwareMatch7.0.8.12
ORciscoadaptive_security_appliance_softwareMatch7.0.8.13
ORciscoadaptive_security_appliance_softwareMatch7.1.2.61
ORciscoadaptive_security_appliance_softwareMatch7.1.2
ORciscoadaptive_security_appliance_softwareMatch7.1.2.81
ORciscoadaptive_security_appliance_softwareMatch7.1.2.64
ORciscoadaptive_security_appliance_softwareMatch7.1.2.72
ORciscoadaptive_security_appliance_softwareMatch7.1.2.16
ORciscoadaptive_security_appliance_softwareMatch7.1.2.20
ORciscoadaptive_security_appliance_softwareMatch7.1.2.24
ORciscoadaptive_security_appliance_softwareMatch7.1.2.28
ORciscoadaptive_security_appliance_softwareMatch7.1.2.38
ORciscoadaptive_security_appliance_softwareMatch7.1.2.42
ORciscoadaptive_security_appliance_softwareMatch7.1.2.46
ORciscoadaptive_security_appliance_softwareMatch7.1.2.49
ORciscoadaptive_security_appliance_softwareMatch7.1.2.53
ORciscoadaptive_security_appliance_softwareMatch7.2.2.34
ORciscoadaptive_security_appliance_softwareMatch7.2.3.1
ORciscoadaptive_security_appliance_softwareMatch7.2.2
ORciscoadaptive_security_appliance_softwareMatch7.2.4
ORciscoadaptive_security_appliance_softwareMatch7.2.3
ORciscoadaptive_security_appliance_softwareMatch7.2.1
ORciscoadaptive_security_appliance_softwareMatch7.2.4.27
ORciscoadaptive_security_appliance_softwareMatch7.2.4.30
ORciscoadaptive_security_appliance_softwareMatch7.2.5
ORciscoadaptive_security_appliance_softwareMatch7.2.4.33
ORciscoadaptive_security_appliance_softwareMatch7.2.1.9
ORciscoadaptive_security_appliance_softwareMatch7.2.1.13
ORciscoadaptive_security_appliance_softwareMatch7.2.1.19
ORciscoadaptive_security_appliance_softwareMatch7.2.1.24
ORciscoadaptive_security_appliance_softwareMatch7.2.2.6
ORciscoadaptive_security_appliance_softwareMatch7.2.2.10
ORciscoadaptive_security_appliance_softwareMatch7.2.2.14
ORciscoadaptive_security_appliance_softwareMatch7.2.2.18
ORciscoadaptive_security_appliance_softwareMatch7.2.2.19
ORciscoadaptive_security_appliance_softwareMatch7.2.2.22
ORciscoadaptive_security_appliance_softwareMatch7.2.3.12
ORciscoadaptive_security_appliance_softwareMatch7.2.3.16
ORciscoadaptive_security_appliance_softwareMatch7.2.4.6
ORciscoadaptive_security_appliance_softwareMatch7.2.4.9
ORciscoadaptive_security_appliance_softwareMatch7.2.4.18
ORciscoadaptive_security_appliance_softwareMatch7.2.4.25
ORciscoadaptive_security_appliance_softwareMatch7.2.5.2
ORciscoadaptive_security_appliance_softwareMatch7.2.5.4
ORciscoadaptive_security_appliance_softwareMatch7.2.5.7
ORciscoadaptive_security_appliance_softwareMatch7.2.5.8
ORciscoadaptive_security_appliance_softwareMatch7.2.5.10
ORciscoadaptive_security_appliance_softwareMatch8.0.2.11
ORciscoadaptive_security_appliance_softwareMatch8.0.4
ORciscoadaptive_security_appliance_softwareMatch8.0.3
ORciscoadaptive_security_appliance_softwareMatch8.0.2
ORciscoadaptive_security_appliance_softwareMatch8.0.1.2
ORciscoadaptive_security_appliance_softwareMatch8.0.4.25
ORciscoadaptive_security_appliance_softwareMatch8.0.4.28
ORciscoadaptive_security_appliance_softwareMatch8.0.4.33
ORciscoadaptive_security_appliance_softwareMatch8.0.4.32
ORciscoadaptive_security_appliance_softwareMatch8.0.5
ORciscoadaptive_security_appliance_softwareMatch8.0.2.15
ORciscoadaptive_security_appliance_softwareMatch8.0.3.6
ORciscoadaptive_security_appliance_softwareMatch8.0.3.12
ORciscoadaptive_security_appliance_softwareMatch8.0.3.19
ORciscoadaptive_security_appliance_softwareMatch8.0.4.3
ORciscoadaptive_security_appliance_softwareMatch8.0.4.9
ORciscoadaptive_security_appliance_softwareMatch8.0.4.16
ORciscoadaptive_security_appliance_softwareMatch8.0.4.23
ORciscoadaptive_security_appliance_softwareMatch8.0.4.31
ORciscoadaptive_security_appliance_softwareMatch8.0.5.20
ORciscoadaptive_security_appliance_softwareMatch8.0.5.23
ORciscoadaptive_security_appliance_softwareMatch8.0.5.25
ORciscoadaptive_security_appliance_softwareMatch8.0.5.27
ORciscoadaptive_security_appliance_softwareMatch8.0.5.28
ORciscoadaptive_security_appliance_softwareMatch8.0.5.31
ORciscoadaptive_security_appliance_softwareMatch8.2.0.45
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2.10
ORciscoadaptive_security_appliance_softwareMatch8.2.3
ORciscoadaptive_security_appliance_softwareMatch8.2.4
ORciscoadaptive_security_appliance_softwareMatch8.2.1.11
ORciscoadaptive_security_appliance_softwareMatch8.2.2.9
ORciscoadaptive_security_appliance_softwareMatch8.2.2.12
ORciscoadaptive_security_appliance_softwareMatch8.2.2.16
ORciscoadaptive_security_appliance_softwareMatch8.2.4.1
ORciscoadaptive_security_appliance_softwareMatch8.2.4.4
ORciscoadaptive_security_appliance_softwareMatch8.2.5
ORciscoadaptive_security_appliance_softwareMatch8.2.5.13
ORciscoadaptive_security_appliance_softwareMatch8.2.5.22
ORciscoadaptive_security_appliance_softwareMatch8.2.5.26
ORciscoadaptive_security_appliance_softwareMatch8.2.2.17
ORciscoadaptive_security_appliance_softwareMatch8.2.5.33
ORciscoadaptive_security_appliance_softwareMatch8.2.5.40
ORciscoadaptive_security_appliance_softwareMatch8.2.5.41
ORciscoadaptive_security_appliance_softwareMatch8.1.1
ORciscoadaptive_security_appliance_softwareMatch8.1.2
ORciscoadaptive_security_appliance_softwareMatch8.1.2.15
ORciscoadaptive_security_appliance_softwareMatch8.1.2.16
ORciscoadaptive_security_appliance_softwareMatch8.1.2.19
ORciscoadaptive_security_appliance_softwareMatch8.1.2.23
ORciscoadaptive_security_appliance_softwareMatch8.1.2.24
ORciscoadaptive_security_appliance_softwareMatch8.1.2.50
ORciscoadaptive_security_appliance_softwareMatch8.1.1.6
ORciscoadaptive_security_appliance_softwareMatch8.1.2.13
ORciscoadaptive_security_appliance_softwareMatch8.1.2.49
ORciscoadaptive_security_appliance_softwareMatch8.1.2.55
ORciscoadaptive_security_appliance_softwareMatch8.1.2.56
ORciscoadaptive_security_appliance_softwareMatch8.3.1.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1
ORciscoadaptive_security_appliance_softwareMatch8.3.2
ORciscoadaptive_security_appliance_softwareMatch8.3.2.23
ORciscoadaptive_security_appliance_softwareMatch8.3.2.25
ORciscoadaptive_security_appliance_softwareMatch8.3.1.4
ORciscoadaptive_security_appliance_softwareMatch8.3.1.6
ORciscoadaptive_security_appliance_softwareMatch8.3.2.4
ORciscoadaptive_security_appliance_softwareMatch8.3.2.13
ORciscoadaptive_security_appliance_softwareMatch8.3.2.31
ORciscoadaptive_security_appliance_softwareMatch8.3.2.33
ORciscoadaptive_security_appliance_softwareMatch8.3.2.34
ORciscoadaptive_security_appliance_softwareMatch8.3.2.37
ORciscoadaptive_security_appliance_softwareMatch8.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.2
ORciscoadaptive_security_appliance_softwareMatch8.4.1.3
ORciscoadaptive_security_appliance_softwareMatch8.4.1.11
ORciscoadaptive_security_appliance_softwareMatch8.4.2.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.3.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3.9
ORciscoadaptive_security_appliance_softwareMatch8.4.4
ORciscoadaptive_security_appliance_softwareMatch8.4.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.4.9
ORciscoadaptive_security_appliance_softwareMatch8.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.5.6
ORciscoadaptive_security_appliance_softwareMatch8.4.6
ORciscoadaptive_security_appliance_softwareMatch8.4.2.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.6
ORciscoadaptive_security_appliance_softwareMatch8.5.1.7
ORciscoadaptive_security_appliance_softwareMatch8.5.1.14
ORciscoadaptive_security_appliance_softwareMatch8.5.1.17
ORciscoadaptive_security_appliance_softwareMatch8.6.1.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1.2
ORciscoadaptive_security_appliance_softwareMatch8.6.1.5
ORciscoadaptive_security_appliance_softwareMatch8.6.1.10
ORciscoadaptive_security_appliance_softwareMatch8.7.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.3
ORciscoadaptive_security_appliance_softwareMatch8.7.1.4
ORciscoadaptive_security_appliance_softwareMatch9.0.1
ORciscoadaptive_security_appliance_softwareMatch9.0.2
ORciscoadaptive_security_appliance_softwareMatch9.1.1
ORciscoadaptive_security_appliance_softwareMatch9.1.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | 7.0 | cpe:2.3:o:cisco:adaptive_security_appliance_software:7.0:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 7.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 7.2 | cpe:2.3:o:cisco:adaptive_security_appliance_software:7.2:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.0 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.2 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.1:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.3 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.4 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.5 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.5:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.6 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.6:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-3414
2013-07-25 15:00:00
cve
cve
CVE-2013-3414
2013-07-25 15:53:16
prion
prion
Cross site scripting
2013-07-25 15:53:00
nessus
nessus
Cisco ASA WebVPN XSS
2013-07-30 00:00:00
nvd
nvd
CVE-2013-3414
2013-07-25 15:53:16
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.002
Percentile
57.7%
Related for CISCO-SA-20130725-CVE-2013-3414