CVE-2014-2118: Cisco Prime Security Manager

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.

Affected products

• Cisco Prime Security Manager: up to and including 9.2.1-2; version 9.0 only; version 9.1 only; version 9.1.2-29 only; version 9.1.2-42 only; version 9.1.3-8 only; …

Published 2014-03-27. Last modified 2026-06-17.