CVE-2017-3874

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

CVE-2017-3877

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

CVE-2017-3874

The CVE-2017-3874 issue affects Cisco Unified Communications Manager (CUCM) web framework. An authenticated, remote attacker can exploit insufficient validation in the CUCM User Options portal to perform a cross-site scripting (XSS) attack. Affected release: 11.5(1.11007.2). Fixed in: 12.0(0.9800...

CVE-2017-3877

CVE-2017-3877 concerns Cisco Unified Communications Manager (CallManager) CSRF vulnerability in the web framework. An unauthenticated remote attacker could induce a user to perform arbitrary actions in the affected web interface due to insufficient CSRF protections (CSCvb70021). Affected release ...

CVE-2017-3874

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

CVE-2017-3866

Cisco Prime Service Catalog exposes a cross-site scripting (XSS) vulnerability in its web framework. An unauthenticated, remote attacker could leverage insufficient input validation of web parameters to execute arbitrary scripts in a user’s browser. Affected release includes 11.1.2. The Cisco adv...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

CVE-2017-3866: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

PT-2017-1540

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.51.11007.2 Description The issue exists due to insufficient protection of the web page structure in the web framework of Cisco Unified Communications Manager. This could allow a remote attacker t...

PT-2017-16149

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog version 11.1.2 Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170315-ucm1)

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the Cisco Unified CM User Options port...

CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

Cross site scripting

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1...

Code injection

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

Cross site scripting

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3847

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1...