Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Identity Services Engine Software | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8022Vendor Advisory
- http://www.securityfocus.com/bid/72083
- http://www.securitytracker.com/id/1031560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100664
- https://tools.cisco.com/security/center/viewAlert.x?alertId=37045
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8022Vendor Advisory
- http://www.securityfocus.com/bid/72083
- http://www.securitytracker.com/id/1031560
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100664
- https://tools.cisco.com/security/center/viewAlert.x?alertId=37045
FAQ
What is CVE-2014-8022?
CVE-2014-8022 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCu...
How severe is CVE-2014-8022?
CVE-2014-8022 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8022?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Identity Services Engine Software.