CVE-2015-6400

Cisco Emergency Responder Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6400) affects Cisco Emergency Responder 10.5(1a). The issue is a stored XSS flaw caused by insufficient validation on input fields in the web framework, allowing an unauthenticated, remote attacker to inject and ...

CVE-2015-6400: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Emergency Responder 10.51a allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547...