VDB

BDU%3A2024-10838

BDU%3A2024-10838 PUBLISHED CVSS 6.099999904632568 MEDIUM

Уязвимость службы веб-клиента VPN микропрограммного обеспечения межсетевых экранов Cisco Adaptive Security Appliance (ASA) и Cisco Firepower Threat Defense (FTD), позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
CiscoCisco Firepower Threat Defense Software6.2.3.14, 6.4.0.1, 6.2.3.7
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3, 9.8.3, 9.12.1
Cisco Systems Inc.Firepower Threat Defense, Adaptive Security Appliance

Timeline

  • Oct 23, 2024 CVE Published
  • Oct 23, 2024 PoC Published
  • Dec 6, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›