Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...

CVE-2014-3372

CVE-2014-3372 affects Cisco Unified Communications Manager (CUCM) Server, specifically the CCM reports interface. The vulnerability is due to insufficient input validation of parameters passed via HTTP GET/POST, enabling multiple reflected XSS attacks. Impact is remote, unauthenticated exploitati...

PT-2014-5262

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM reports interface of the Server in Cisco Unified Communications Manager. These...

CVE-2014-3372: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...