CVE-2014-2118

MEDIUM 4.3CVE-2014-2118 · Published 27/03/2014 · updated 17/06/2026

In short

CVE-2014-2118 is a MEDIUM (CVSS 4.3) vulnerability affecting prime security manager (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
prime security manager cisco	`= 9.0= 9.1= 9.1.2-29= 9.1.2-42= 9.1.3-10= 9.1.3-13= 9.1.3-8= 9.2= 9.2.1-1≤ 9.2.1-2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2118 · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/66488
securitytracker.com/id/1029968

More vulnerabilities in prime security manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

prime security manager

cisco

= 9.0= 9.1= 9.1.2-29= 9.1.2-42= 9.1.3-10= 9.1.3-13= 9.1.3-8= 9.2= 9.2.1-1≤ 9.2.1-2

No fix yet

More vulnerabilities in prime security manager

See all →