CVE-2014-8021: XSS
Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8021?
CVE-2014-8021 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2014-8021?
To mitigate CVE-2014-8021, upgrade to the latest version of Cisco AnyConnect Secure Mobility Client or HostScan Engine that addresses this issue.
What software is affected by CVE-2014-8021?
CVE-2014-8021 affects Cisco AnyConnect Secure Mobility Client versions up to 3.1(.02043) and Cisco HostScan Engine versions up to 3.1(.05183).
Can CVE-2014-8021 lead to data theft?
Yes, CVE-2014-8021 can potentially allow remote attackers to inject harmful scripts that may lead to data theft.
Is there a workaround for CVE-2014-8021?
While upgrading is the best solution for CVE-2014-8021, employing strict input validation can serve as a temporary workaround.