CVE-2014-3266

Published: May 26, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.

Affected (18)

Products: Cisco: Security Manager

Cisco

1 product

Security Manager

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Security Manager	Up to 4.6
Cisco Security Manager	Version 4.0.1
Cisco Security Manager	Version 4.0.1 sp1
Cisco Security Manager	Version 4.0.1 sp2
Cisco Security Manager	Version 4.0
Cisco Security Manager	Version 4.0 sp1
Cisco Security Manager	Version 4.1
Cisco Security Manager	Version 4.1 sp1
Cisco Security Manager	Version 4.1 sp2
Cisco Security Manager	Version 4.2
Cisco Security Manager	Version 4.2 sp1
Cisco Security Manager	Version 4.3
Cisco Security Manager	Version 4.3 sp1
Cisco Security Manager	Version 4.3 sp2
Cisco Security Manager	Version 4.4
Cisco Security Manager	Version 4.4 sp1
Cisco Security Manager	Version 4.4 sp2
Cisco Security Manager	Version 4.5