CVE-2016-1377

Cross-site scripting XSS vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776...

CVE-2016-1377

Cross-site scripting XSS vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776...

CVE-2016-1377

Cross-site scripting XSS vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776...

CVE-2016-1377

Cisco Unity Connection up to version 11.0 contains a cross-site scripting (XSS) vulnerability in its web framework. An unauthenticated, remote attacker could inject arbitrary web script or HTML via unspecified parameters in the web interface, which is exploitable when a user follows a crafted lin...

Cisco Unity Connection Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of certain parameters...

CVE-2016-1377: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776...

PT-2016-4745

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions prior to 11.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Recommendations For versions prior to 11.0, update to version...

Cisco Unified Communications Manager Information Disclosure

The vulnerabilities of the Cisco Unified Communications Manager, a software solution for instant messaging, Unified Communications Manager IM and Presence Service, and Unified Contact Center Express, a software solution for automating operator operations, as well as the integrated Cisco Unity...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2016-01055)

Cisco Unity Connection UC is a voice messaging platform from Cisco. The platform can use voice commands to make calls or listen to messages in a "hands-free" way. A cross-site scripting vulnerability exists in Cisco UC version 11.5 0.199. A remote attacker can exploit this vulnerability to inject...

Code injection

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

CVE-2016-1319: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

PT-2016-1263

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 9.12.10000.28 through 11.01.10000.10 Unified Communications Manager IM & Presence Service version 10.52 Unified Contact Center Express version 11.01 Unity Connection version 10.52 Description The...

CVE-2016-1310

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...

CVE-2016-1310

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...

CVE-2016-1310

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...

CVE-2016-1310

CVE-2016-1310 refers to a Cross-Site Scripting (XSS) vulnerability in Cisco Unity Connection Web Framework affecting version 11.5(0.199) . The issue arises from insufficient input validation, enabling remote attackers to inject arbitrary web script or HTML via a crafted URL. Exploitation is possi...

CVE-2016-1310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...

PT-2016-4700

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 11.50.199 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco Unity Connection version 11.50.199, update to a...