Cisco Unity Connection Reflected XSS Vulnerability (cisco-sa-20170906-cuc)

Cisco Unity Connection 10.52 with a default configuration allows remote attackers to conduct a reflected cross-site scripting XSS attack against the user of the web interface by submitting invalid input parameters via HTTP GET or POST. C Tenable Network Security, Inc. include"compat.inc"; if...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2017-31983)

Cisco Unity Connection UC is a voice messaging platform from Cisco. The platform can use voice commands to make calls or listen to messages in a "hands-free" way. A cross-site scripting vulnerability exists in the Web framework of Cisco UC version 10.52, which arises from the program's failure to...

Cross site scripting

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

Cisco Unity Connection (v10.5(2) with default config) is affected by a reflected cross-site scripting (XSS) vulnerability in its web framework. The issue arises from insufficient input validation on HTTP GET/POST parameters, allowing an unauthenticated, remote attacker to persuade a user to follo...

CVE-2017-12212: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

PT-2017-12402

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 10.52 Description A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web...

Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

Cisco Unity Connection Unauthorized Access Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. Cisco Unity Connection has an unauthorized access vulnerability vulnerability in the ImageID parameter. The vulnerability stems from the HTTP POST parameter user input no...

Directory traversal

A vulnerability in the ImageID parameter of Cisco Unity Connection 10.52 could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that...

CVE-2017-6629

A vulnerability in the ImageID parameter of Cisco Unity Connection 10.52 could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that...

CVE-2017-6629

A vulnerability in the ImageID parameter of Cisco Unity Connection 10.52 could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that...

CVE-2017-6629

A vulnerability in the ImageID parameter of Cisco Unity Connection 10.52 could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that...

CVE-2017-6629

The CVE-2017-6629 entry concerns Cisco Unity Connection 10.5(2). Affected component: ImageID parameter handling in HTTP POST submissions. Root cause: improper sanitization of filenames in user-supplied input, enabling directory traversal. Impact: an unauthenticated, remote attacker could access f...

Cisco Unity Connection ImageID Parameter Unauthorized Access Vulnerability

A vulnerability in the ImageID parameter of Cisco Unity Connection could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe...

CVE-2017-6629: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the ImageID parameter of Cisco Unity Connection 10.52 could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that...

PT-2017-17198

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 10.52 Description A vulnerability could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2016-02252)

Cisco Unity Connection UC is a voice messaging platform from Cisco. The platform can use voice commands to make calls or listen to messages in a "hands-free" way. A cross-site scripting vulnerability exists in Cisco UC 11.0 and earlier versions. A remote attacker can exploit this vulnerability by...