CVE-2014-8028: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control Sys...

Security readout for executives and security teams

CVE-2014-8028 covers multiple XSS flaws in Cisco Secure Access Control System's web framework. A remote attacker could inject script or HTML through unspecified parameters. Business risk centers on abuse of trusted ACS web sessions, especially administrative access, but the source bundle does not identify affected versions or fixed releases. Exposure is likely limited to organizations still running Cisco Secure ACS with its web interface reachable by users or administrators. The provided affected-product metadata is incomplete and lists no versions or CPEs, so exact exposure requires Cisco advisory and asset inventory confirmation. Treat as a medium-priority legacy platform risk unless ACS is internet-accessible or used for high-privilege administration. The main decision is whether exposed ACS systems still exist and whether Cisco identifies installed versions as vulnerable. Mitigation focus: Identify all Cisco Secure ACS deployments and web management interfaces.; Review Cisco's CVE-2014-8028 notice for affected versions and fixed software.; Restrict ACS web access to trusted administration networks..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.