Cisco Secure Firewall Asa
A flaw exists in the SAML 2.0 single sign-on (SSO) feature that could permit an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against the SAML feature and obtain sensitive, browser-based information. This is caused by inadequate validation of multiple HTTP parameters. An attacker could exploit this by convincing a user to access a malicious link, potentially leading to a reflected XSS attack through an affected device.