CVE-2014-0668: Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows r...

Security readout for executives and security teams

CVE-2014-0668 is a cross-site scripting issue in the portal of Cisco Secure Access Control System. The public record says a remote attacker could inject web script or HTML through an unspecified parameter. Business urgency depends on whether Cisco Secure ACS is still deployed and exposed to users or administrators. Exposure is most likely in organizations still running Cisco Secure ACS with the portal reachable by administrators or users. The supplied affected-product metadata is incomplete, so teams must verify exact ACS versions against Cisco’s advisory rather than infer coverage from this record alone. Treat this as a targeted legacy-platform risk. It is not supported by active-exploitation evidence in the bundle, but exposed identity or network-access administration portals deserve timely verification and vendor-guided remediation. Mitigation focus: Check Cisco’s security notice for affected versions, fixed releases, and workaround status.; Inventory any remaining Cisco Secure ACS deployments and portal exposure.; Restrict ACS portal access to trusted administrative networks where operationally possible..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.