CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Dec 3, 2024

CVE-2014-2120

High

EPSS 63.9%CISA KEV

Cisco/Adaptive Security Appliance (ASA)

Description

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

EPSS — Exploit Probability

63.9%

Higher than 98.4% of all CVEs

Required Action

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 63.9%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Nov 12, 2024

Added to KEV

Nov 12, 2024

Remediation Due

Dec 3, 2024

Affected Product

Cisco

Adaptive Security Appliance (ASA)

View all Cisco CVEs

External Links

NVD (NIST)CVE Details MITRE CVE