CVE-2018-0411

Summary: CVE-2018-0411 describes a reflected cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM). The root cause is insufficient validation of user-supplied input in the interface, enabling an unauthenticated, remote attacke...

CVE-2018-0411: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...