CVE-2014-0663: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) a...

Security readout for executives and security teams

CVE-2014-0663 is a cross-site scripting issue in Cisco Secure Access Control System's web framework. A remote attacker could inject script or HTML through an unspecified parameter. For executives, the concern is compromise of trust in an administrative security system, but the provided sources do not give CVSS, affected versions, or named fixes. Exposure is limited to environments that run Cisco Secure Access Control System with the vulnerable web framework reachable by users or attackers. Publicly exposed ACS administration interfaces would carry higher risk. The provided bundle does not identify affected versions or deployment conditions. Handle as a targeted legacy security-platform exposure review. It is not KEV-listed in the provided data, but because ACS may support authentication and access control workflows, exposed vulnerable instances should be assessed and remediated promptly. Mitigation focus: Review Cisco's CVE-2014-0663 notice for affected releases and vendor remediation.; Inventory Cisco Secure ACS deployments and identify exposed web management interfaces.; Restrict ACS web access to trusted administrative networks while remediation is confirmed..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.