CVE-2013-3414

2013-07-2515:53:16

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.7%

JSON

Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080.

Affected configurations

Nvd

Node

ciscoadaptive_security_appliance_softwareMatch-

AND

ciscoadaptive_security_appliance

VendorProductVersionCPE
ciscoadaptive_security_appliance_software-cpe:2.3:o:cisco:adaptive_security_appliance_software:-:*:*:*:*:*:*:*
ciscoadaptive_security_appliance*cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	-	cpe:2.3:o:cisco:adaptive_security_appliance_software:-:::::::*
cisco	adaptive_security_appliance	*	cpe:2.3:h:cisco:adaptive_security_appliance::::::::