CVE-2016-1300

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

CVE-2016-1300

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

CVE-2016-1300

CVE-2016-1300 affects Cisco Unity Connection (UC) 10.5(2.3009) Web Framework. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient input validation, allowing remote, unauthenticated attackers to inject arbitrary script/HTML through a crafted URL. Impact per sources: attac...

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unity Connection UC could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-supplied input. An attacker could exploit this vulnerability by...

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

Cisco Unity Connection is a feature-rich voice mail platform. A cross-site request forgery vulnerability exists in Cisco Unity Connection 11.5 0.98. A remote attacker can exploit this vulnerability to submit arbitrary requests to an affected device, hijacking the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578...

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

A cross-site request forgery CSRF vulnerability in Cisco Unity Connection could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of CSRF protections by an affected device. An attacker could exploit this vulnerability by convincing a user to...

Cisco Unity Connection cross-site scripting Vulnerability(CVE-2 0 1 5-6 3 9 0)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 3 9 0 Cisco Unity Connection is a feature-rich voice mail platform, using Linux Unified Communicationsoperating system. Cisco Unity Connection 9.11.10the Management Interface cross-site scripting vulnerability, the remote attacker via a URL within the structure of the...

Cisco Unity Connection跨站脚本漏洞

No description provided by source...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...

CVE-2015-6390

Cisco Unity Connection 9.1(1.10) management interface vulnerable to cross-site scripting (XSS) via crafted URLs. Root cause: insufficient input validation. Impact: partial integrity exposure; no explicit availability impact. Exploitation details: remote attacker could inject arbitrary script in t...

CVE-2015-6390

Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...

Cisco Unity Connection Web Interface SQL Injection Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A SQL injection vulnerability exists in the web interface of Cisco Unity Connection 9.11.2 and earlier versions, which can be exploited by a remote attacker to execute...

Sql injection

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.11.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824...

CVE-2015-6299

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.11.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824...

Cisco Unity Connection Web Interface SQL Injection Vulnerability

A vulnerability in the web interface of Cisco Unity Connection UC could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation on user-supplied input in SQL queries. An attacker...

Cisco Unity Connection CUCReports Web Interface Cross-Site Request Forgery Vulnerability

Cisco Unified Communications Manager is a call processing component of a Unified Communications system. A cross-site request forgery vulnerability exists in the web management interface of Cisco Unified Communications Manager, which allows remote attackers to construct malicious URIs, trick users...

CVE-2015-0716

Cross-site request forgery CSRF vulnerability in the CUCReports page in Cisco Unity Connection 11.00.98000.225 and 11.00.98000.332 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the CUCReports page in Cisco Unity Connection 11.00.98000.225 and 11.00.98000.332 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659...