Lucene search
CiscoCVE-2015-0696HistoryApr 15, 2015 - 10:59 a.m.
CVE-2015-0696
2015-04-1510:59:02
CWE-79
cisco
web.nvd.nist.gov
26
cve-2015-0696
cross-site scripting
xss
vulnerability
cisco tc software
cisco telepresence
cscuq94977
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
43.4%
Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977.
Affected configurations
Node
ciscotelepresence_tc_softwareMatch6.0.0
ORciscotelepresence_tc_softwareMatch6.0.0-cucm
ORciscotelepresence_tc_softwareMatch6.0.1
ORciscotelepresence_tc_softwareMatch6.0.1-cucm
ORciscotelepresence_tc_softwareMatch6.0.2
ORciscotelepresence_tc_softwareMatch6.0_base
ORciscotelepresence_tc_softwareMatch6.1.0
ORciscotelepresence_tc_softwareMatch6.1.0-cucm
ORciscotelepresence_tc_softwareMatch6.1.1
ORciscotelepresence_tc_softwareMatch6.1.1-cucm
ORciscotelepresence_tc_softwareMatch6.1.2
ORciscotelepresence_tc_softwareMatch6.1.2-cucm
ORciscotelepresence_tc_softwareMatch6.1_base
ORciscotelepresence_tc_softwareMatch6.3_base
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | telepresence_tc_software | 6.0.0 | cpe:2.3:a:cisco:telepresence_tc_software:6.0.0:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.0.0-cucm | cpe:2.3:a:cisco:telepresence_tc_software:6.0.0-cucm:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.0.1 | cpe:2.3:a:cisco:telepresence_tc_software:6.0.1:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.0.1-cucm | cpe:2.3:a:cisco:telepresence_tc_software:6.0.1-cucm:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.0.2 | cpe:2.3:a:cisco:telepresence_tc_software:6.0.2:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.0_base | cpe:2.3:a:cisco:telepresence_tc_software:6.0_base:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.1.0 | cpe:2.3:a:cisco:telepresence_tc_software:6.1.0:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.1.0-cucm | cpe:2.3:a:cisco:telepresence_tc_software:6.1.0-cucm:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.1.1 | cpe:2.3:a:cisco:telepresence_tc_software:6.1.1:*:*:*:*:*:*:* |
| cisco | telepresence_tc_software | 6.1.1-cucm | cpe:2.3:a:cisco:telepresence_tc_software:6.1.1-cucm:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2015-04-15 10:59:00
cvelist
cvelist
CVE-2015-0696
2015-04-15 10:00:00
cisco
cisco
Multiple Cisco TelePresence Products Cross-Site Scripting Vulnerability
2015-04-14 18:47:46
nvd
nvd
CVE-2015-0696
2015-04-15 10:59:02
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
43.4%
Related for CVE-2015-0696