CVE-2021-1444

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web services interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive, browser-based information.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is part of the October 2021 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see .

• CWE-79

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-webui-gQLSFyPM

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1438A vulnerability in Cisco Wide Area Application Services (WAA…5.5
• CVE-2021-1439A vulnerability in the multicast DNS (mDNS) gateway feature …7.4
• CVE-2021-1440A vulnerability in the implementation of the Resource Public…6.8
• CVE-2021-1441A vulnerability in the hardware initialization routines of C…6.7
• CVE-2021-1442A vulnerability in a diagnostic command for the Plug-and-Pla…7.8
• CVE-2021-1443A vulnerability in the web UI of Cisco IOS XE Software could…7.2
• CVE-2021-1445Multiple vulnerabilities in Cisco Adaptive Security Applianc…7.5
• CVE-2021-1446A vulnerability in the DNS application layer gateway (ALG) f…7.5
• CVE-2021-1447A vulnerability in the user account management system of Cis…6.7
• CVE-2021-1448A vulnerability in the CLI of Cisco Firepower Threat Defense…7.8
• CVE-2021-1449A vulnerability in the boot logic of Cisco Access Points Sof…6.7
• CVE-2021-1450A vulnerability in the interprocess communication (IPC) chan…5.5