CVE-2014-8028

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/100553

http://www.securitytracker.com/id/1031515

http://www.securityfocus.com/bid/71946

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8028

http://secunia.com/advisories/62159

Details

Source: Mitre, NVD

Published: 2015-01-09

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N