CVE-2014-2114: XSS

First published: Fri Apr 04 2014(Updated: )

Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/severity
• agent/weakness
• agent/author
• agent/description
• agent/tags
• agent/type
• agent/event
• agent/first-publish-date
• agent/softwarecombine
• agent/last-modified-date
• collector/mitre-cve
• source/MITRE
• vendor/cisco
• canonical/cisco emergency responder
• version/cisco emergency responder/8.6