CVE-2013-6974

CVE Database · CVE-2013-6974

CVE-2013-6974

· N/AModified

CVSS v3.1

N/A

EPSS

1.44%

Published

Jan 10, 2014

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.

Weaknesses (CWE)

CWE-79

Affected Products (1)

cisco · secure_access_control_systemvulnerable

References (10)

http://osvdb.org/101894

http://secunia.com/advisories/56353

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974

Vendor Advisory

http://www.securityfocus.com/bid/64752

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029594

Third Party AdvisoryVDB Entry

http://osvdb.org/101894

http://secunia.com/advisories/56353

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs