Read the docs
TI-2021-01171 Aliases CVE-2021-1444GHSA-7g68-q6c8-27w9

Cross-site scripting in Cisco Adaptive Security Appliance Software

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is part of the October 2021 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see .

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00456 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Adaptive Security Appliance (ASA) Software9.4.2.6; 9.0.1.1; 9.0.1.2; 9.0.1.4; 9.0.2.12; 9.0.2.2; 9.0.2.6; 9.0.3.1; 9.0.3.10; 9.0.3.3; 9.1.1.2; 9.1.1.7; 9.1.1.8; 9.1.2.3; 9.1.2.5; 9.1.2.6; 9.1.3.4; 9.1.4.3; 9.1.4.6; 9.1.5.1; 9.1.5.2; 9.1.5.3; 9.1.5.6; 9.1.5.7; 9.4.2.11; 9.5.3.1; 9.1.2; 9.3.1—No fix listedCNA
  • Cisco Adaptive Security Appliance (ASA) Software VendorCisco Affected 9.4.2.6; 9.0.1.1; 9.0.1.2; 9.0.1.4; 9.0.2.12; 9.0.2.2; 9.0.2.6; 9.0.3.1; 9.0.3.10; 9.0.3.3; 9.1.1.2; 9.1.1.7; 9.1.1.8; 9.1.2.3; 9.1.2.5; 9.1.2.6; 9.1.3.4; 9.1.4.3; 9.1.4.6; 9.1.5.1; 9.1.5.2; 9.1.5.3; 9.1.5.6; 9.1.5.7; 9.4.2.11; 9.5.3.1; 9.1.2; 9.3.1 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-1444
  2. 2026-10-03 Alias added: GHSA-7g68-q6c8-27w9

References

Other 1

  • TI-2026-74174 Arbitrary file write in Cisco Secure Email Gateway via AMP feature KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-53490 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-53489 Cisco Secure Email Gateway SQL Injection Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-53488 Cisco Identity Services Engine Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2026-16388 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2026-16344 Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 10.0
See all 7059 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences