CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3829

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3821

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvc49348. Known Affected Releases: 10.52.14076.1. Known Fixed Releases: 12.00.98000.209...

CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

Cross site scripting

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvc49348. Known Affected Releases: 10.52.14076.1. Known Fixed Releases: 12.00.98000.209...

Cross site scripting

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3829

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

Code injection

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3829

The CVE-2017-3829 entry affects Cisco Unified Communications Manager (CUCM) Switches, where the web-based management interface fails to validate user input, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the affected device. The vulne...

CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3821

CVE-2017-3821 affects Cisco Unified Communications Manager (CUCM) serviceability page, where improper sanitization/encoding of user input enables unauthenticated, remote attackers to trigger reflected XSS. Affected release: 10.5(2.14076.1). Fixed in CUCM 12.0(0.98000.209), 12.0(0.98000.478), and ...

CVE-2017-3821

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvc49348. Known Affected Releases: 10.52.14076.1. Known Fixed Releases: 12.00.98000.209...

CVE-2017-3828

Cisco Unified Communications Manager (CUCM) Switches Web UI is vulnerable to cross-site scripting (XSS) via unauthenticated remote access. The issue arises from insufficient validation of user-supplied input in the web-based management interface, enabling an attacker to execute script in a user's...

CVE-2017-3833

The CVE-2017-3833 entry concerns Cisco Unified Communications Manager (CUCM) Web Interface XSS. A vulnerability exists in the web framework where insufficient input validation allows an unauthenticated, remote attacker to execute arbitrary script in the context of the user’s web interface. Affect...

CVE-2017-3836

CVE-2017-3836 affects Cisco Unified Communications Manager (CUCM) web framework. The vulnerability allows an attacker to view sensitive data via a flaw in access protection of sensitive files exposed through URL parameters. Connected sources describe it as an information-disclosure issue in CUCM’...

CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...