CVE-2014-2118

Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.

Published: Mar 27, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-2118
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
cisco / prime_security_manager	9.2	9.2.x
cisco / prime_security_manager	9.1.2-29	9.1.2-29.x
cisco / prime_security_manager	9.1.3-13	9.1.3-13.x
cisco / prime_security_manager	9.1.2-42	9.1.2-42.x
cisco / prime_security_manager	9.1	9.1.x
cisco / prime_security_manager	9.0	9.0.x
cisco / prime_security_manager	-	9.2.1-2.x
cisco / prime_security_manager	9.1.3-10	9.1.3-10.x
cisco / prime_security_manager	9.2.1-1	9.2.1-1.x
cisco / prime_security_manager	9.1.3-8	9.1.3-8.x

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2118
http://tools.cisco.com/security/center/viewAlert.x?alertId=33542
http://www.securityfocus.com/bid/66488
http://www.securitytracker.com/id/1029968

Vulnerability Database

290,273

CVE-2014-2118