CVE-2013-6974

CVE-2013-6974

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/101894 http://secunia.com/advisories/56353 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974 http://www.securityfocus.com/bid/64752 http://www.securitytracker.com/id/1029594