
Cisco has issued an updated advisory alerting customers about the active exploitation of a decade-old security vulnerability in its Adaptive Security Appliance (ASA), specifically CVE-2014-2120. This flaw, initially identified in 2014 with a CVSS score of 4.3, involves insufficient input validation in ASA’s WebVPN login page. As a result, an unauthenticated remote attacker could potentially execute a cross-site scripting (XSS)










