CyberSecurity updates
2025-01-06 14:06:13 Pacfic
2025-01-06 14:06:13 Pacfic
Active Exploitation of Decade-Old Cisco ASA WebVPN Vulnerability - 2d
Cisco has confirmed active exploitation of a decade-old cross-site scripting (XSS) vulnerability (CVE-2014-2120) in its Adaptive Security Appliance (ASA) software’s WebVPN login page. Unauthenticated, remote attackers can conduct XSS attacks against WebVPN users. Cisco strongly recommends upgrading to a fixed software release to remediate this vulnerability. This vulnerability was originally disclosed in 2014 and has recently been actively exploited.