Unscored severity · published Jun 10, 2014
CVE-2014-3289
Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Content Security Management Appliance · Cisco
All versions, or not specified · source: NVD
ES
Email Security Appliance Firmware · Cisco
All versions, or not specified · source: NVD
IA
Ironport Asyncos · Cisco
through 8.0; through 8.3; 8.0 · source: NVD
WS
Web Security Appliance · Cisco
All versions, or not specified · source: NVD
Affected product
CS
Content Security Management Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3289
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3289
packetstormsecurity.com
http://packetstormsecurity.com/files/127004/Cisco-Ironport-Email-Security-Virtual-Appliance-8.0.0-671-XSS.html
Exploit
http://seclists.org/fulldisclosure/2014/Jun/57
Permissions Required
http://secunia.com/advisories/58296
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3289
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34569
www.kb.cert.org
http://www.kb.cert.org/vuls/id/613308
More from Content Security Management Appliance
7.5
CVE-2016-2183
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which…
6.7
CVE-2021-1447
A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, local attacker to…
6.5
CVE-2021-1516
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and…
6.5
CVE-2020-3447
A vulnerability in the CLI of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an…
6.5
CVE-2018-0140
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download…