November 12, 2024 · Applied Cybernetics Group
CVE-2014-2120 — Cisco Adaptive Security Appliance (ASA)
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
- Added to KEV
2024-11-12- Federal due date
2024-12-03- Vendor
- Cisco
- Product
- Adaptive Security Appliance (ASA)
- EPSS
- 98.9th percentile (score 0.751, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2014-2120
CISA short description
Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.