onyx

onyx --cves cve-2014-2120

CVE-2014-2120

N/AKEVCisco ASA
score
<0.1
cvss
—
epss
22.6%
published
—
kev added
2024-11-12
first seen

Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2024-11-12 — Added to CISA KEVK2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 18.8%2026-09-23: epss 18.8%2026-09-24: epss 18.8%2026-09-25: epss 18.8%2026-09-26: epss 18.8%2026-09-27: epss 18.8%2026-09-28: epss 22.6%2026-09-29: epss 22.6%2026-09-30: epss 22.6%2026-10-01: epss 22.6%2026-10-02: epss 22.6%2026-10-03: epss 22.6%2026-10-04: epss 22.6%2026-10-05: epss 22.6%2026-10-06: epss 22.6%2026-10-07: epss 22.6%2026-10-08: epss 22.6%2026-10-09: epss 22.6%2026-10-10: epss 22.6%2026-10-11: epss 22.6%2026-10-12: epss 22.6%2026-10-13: epss 22.6%2026-10-14: epss 22.6%2026-10-15: epss 22.6%2026-10-16: epss 22.6%2026-10-18: epss 22.6%2026-10-19: epss 22.6%2026-10-20: epss 22.6%2026-10-21: epss 22.6%22.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Added to CISA KEV
  2. Tracked by Onyx

Weaknesses

CWE-79

References 2