ZeroDay Findings
Sign inSign up

Findings

CVE-2014-2120

Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

Published Mar 18, 2014 · updated Jun 16, 2026 · cisco adaptive security appliance software

Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2014 · Catalog

    Detected

    Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

  2. Nov 12, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Dec 3, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Dec 3, 2024

Affected

  • cpe cisco/adaptive security appliance softwareversion unspecified
  • vendor Cisco Adaptive Security Appliance (ASA)version unspecified

Sources

  • CISA KEVCVE-2014-2120

    Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

    cisa.gov
  • CVE.orgCVE-2014-2120

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2014-2120

    30-day exploitation probability 22.6%

    first.org
  • NIST NVDCVE-2014-2120

    Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

    nvd.nist.gov

References