CVE-2014-8021: XSS
First published: Tue Feb 03 2015(Updated: )
Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco HostScan Engine | <=3.1\(.05183\) | |
| Cisco Anyconnect Secure Mobility Client | <=3.1\(.02043\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco hostscan engine
- version/cisco hostscan engine/3.1\(.05183\)
- canonical/cisco anyconnect secure mobility client
- version/cisco anyconnect secure mobility client/3.1\(.02043\)