Unrated severityNVD Advisory· Published Mar 24, 2014· Updated Jun 17, 2026

CVE-2014-2586

Description

Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbitrary web script or HTML via a crafted password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

McAfee/Cloud Single Sign On
cpe:2.3:a:mcafee:cloud_single_sign_on:-:*:*:*:*:*:*:*
WordPress/Cloud SSO Single Sign Onllm-fuzzy
Package: https://wordpress.org/plugins/cloud-sso-single-sign-on

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.htmlnvdExploit
seclists.org/fulldisclosure/2014/Mar/325nvdExploit
www.exploit-db.com/exploits/32368nvdExploit
www.securityfocus.com/bid/66302nvdExploit
twitter.com/BrandonPrry/status/445969380656943104nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000