CVE-2014-3393: Cisco Adaptive Security Appliance Software

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.14), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), and 9.2 before 9.2(2.4) does not properly implement authentication, which allows remote attackers to modify RAMFS customization objects via unspecified vectors, as demonstrated by inserting XSS sequences or capturing credentials, aka Bug ID CSCup36829.

Affected products

• Cisco Adaptive Security Appliance Software: version 8.2 only; version 8.2.0.45 only; version 8.2.1 only; version 8.2.1.1 only; version 8.2.2 only; version 8.2.2.10 only; …

Published 2014-10-10. Last modified 2026-06-17.