PT-2018-8756

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server Software affected versions not specified Description A vulnerability in the web UI could allow an unauthenticated, remote attacker to conduct a cross-frame scripting XFS attack against a user of the web UI. The issue ...

CVE-2018-0326: Protection Mechanism Failure

A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting XFS attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for HTML inline frames...

CVE-2014-3324

CVE-2014-3324 affects Cisco TelePresence Server Software 4.0(2.8). The vulnerability is in the administrative web interface login page, where insufficient input validation of certain HTTP GET/POST parameters allows unauthenticated remote attackers to inject arbitrary script/HTML (XSS). Cisco’s ad...

CVE-2014-3324: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.02.8 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060...

PT-2014-5218

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server Software version 4.02.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the login page of the administrative web interface. These vulnerabilities allow remote attackers to inject...