CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3266

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-3266

Cisco » Security Manager » Version: N/A

cpe:2.3:a:cisco:security_manager:-
Cisco » Security Manager » Version: 3.0.2

cpe:2.3:a:cisco:security_manager:3.0.2
Cisco » Security Manager » Version: 3.1

cpe:2.3:a:cisco:security_manager:3.1
Cisco » Security Manager » Version: 3.1.1

cpe:2.3:a:cisco:security_manager:3.1.1
Cisco » Security Manager » Version: 3.2

cpe:2.3:a:cisco:security_manager:3.2
Cisco » Security Manager » Version: 3.2.1

cpe:2.3:a:cisco:security_manager:3.2.1
Cisco » Security Manager » Version: 3.2.2

cpe:2.3:a:cisco:security_manager:3.2.2
Cisco » Security Manager » Version: 3.3

cpe:2.3:a:cisco:security_manager:3.3
Cisco » Security Manager » Version: 3.3.1

cpe:2.3:a:cisco:security_manager:3.3.1
Cisco » Security Manager » Version: 4.0

cpe:2.3:a:cisco:security_manager:4.0
Cisco » Security Manager » Version: 4.0.1

cpe:2.3:a:cisco:security_manager:4.0.1
Cisco » Security Manager » Version: 4.1

cpe:2.3:a:cisco:security_manager:4.1
Cisco » Security Manager » Version: 4.2

cpe:2.3:a:cisco:security_manager:4.2
Cisco » Security Manager » Version: 4.3

cpe:2.3:a:cisco:security_manager:4.3
Cisco » Security Manager » Version: 4.4

cpe:2.3:a:cisco:security_manager:4.4
Cisco » Security Manager » Version: 4.5

cpe:2.3:a:cisco:security_manager:4.5
Cisco » Security Manager » Version: 4.6

cpe:2.3:a:cisco:security_manager:4.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3266

Products

Pricing

Contact Us