{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) · updates",
  "home_page_url": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120",
  "feed_url": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120/feed.json",
  "description": "Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Added to the CISA KEV catalog on 2024-11-12. CVE-2014-2120 was assigned before 2024; the KEV listing came in 2024.",
  "language": "en",
  "_pwn": {
    "slug": "cisco-adaptive-security-appliance-asa-cve-2014-2120",
    "severity": "medium",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120/feed.xml",
    "llms": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120/llms.txt",
    "json": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120#2024-11-12-a172b72b",
      "url": "https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120#2024-11-12-a172b72b",
      "title": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS): CISA added CVE-2014-2120 to the KEV catalog (federal deadline 2024-12-03)",
      "content_text": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS): CISA added CVE-2014-2120 to the KEV catalog (federal deadline 2024-12-03)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-11-12T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "medium"
      ]
    }
  ]
}