6.4средняя

BDU:2025-00123 (CVE-2014-2120)

Уязвимость веб-сервера VPN микропрограммного обеспечения межсетевых экранов Cisco Adaptive Security Appliance (ASA), позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

Опубликовано: 2025-01-10

Уязвимость веб-сервера VPN микропрограммного обеспечения межсетевых экранов Cisco Adaptive Security Appliance (ASA) существует из-за непринятия мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, провести атаку межсайтового скриптинга (XSS)

Adaptive Security Appliance (8.0.2.11)Adaptive Security Appliance (8.0.4)Adaptive Security Appliance (8.0.3)Adaptive Security Appliance (8.0.2)Adaptive Security Appliance (8.0.1.2)Adaptive Security Appliance (8.0.4.25)Adaptive Security Appliance (8.0.4.28)Adaptive Security Appliance (8.0.4.33)Adaptive Security Appliance (8.0.4.32)Adaptive Security Appliance (8.0.5)Adaptive Security Appliance (8.0.2.15)Adaptive Security Appliance (8.0.3.6)Adaptive Security Appliance (8.0.3.12)Adaptive Security Appliance (8.0.3.19)Adaptive Security Appliance (8.0.4.3)Adaptive Security Appliance (8.0.4.9)Adaptive Security Appliance (8.0.4.16)Adaptive Security Appliance (8.0.4.23)Adaptive Security Appliance (8.0.4.31)Adaptive Security Appliance (8.0.5.20)Adaptive Security Appliance (8.0.5.23)Adaptive Security Appliance (8.0.5.25)Adaptive Security Appliance (8.0.5.27)Adaptive Security Appliance (8.0.5.28)Adaptive Security Appliance (8.0.5.31)Adaptive Security Appliance (8.2.0.45)Adaptive Security Appliance (8.2.1)Adaptive Security Appliance (8.2.2)Adaptive Security Appliance (8.2.2.10)Adaptive Security Appliance (8.2.3)

Использование рекомендаций производителя:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120