CVE:CVE-2014-8021
CNNVD:CNNVD-201502-067
Cisco AnyConnect Secure Mobility Client和Cisco HostScan Engine都是美国思科（Cisco）公司的产品。Cisco AnyConnect Secure Mobility Client是一款可通过任何设备安全访问网络和应用的安全移动客户端；Cisco HostScan Engine是一套支持防病毒、反间谍软件和防火墙的应用程序。
Cisco AnyConnect Secure Mobility Client 3.1(.02043)及之前版本和Cisco HostScan Engine 3.1(.05183)及之前版本中存在跨站脚本漏洞。远程攻击者可借助applet-path URL利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade cisco hostscan_engine to a higher version than 3.1\(.05183\,and avoid the version (,3.1\(.05183\)]; Upgrade cisco anyconnect_secure_mobility_client to a higher version than 3.1\(.02043\,and avoid the version (,3.1\(.02043\)]