CVE-2013-1171

2013-04-0119:00:00

cisco

www.cve.org

cross-site scripting

cisco connected grid network management system

remote attackers

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882, CSCue38881, CSCue38872, CSCue38868, CSCue38866, CSCue38853, and CSCue14540.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1171