CVE-2017-3874

The CVE-2017-3874 issue affects Cisco Unified Communications Manager (CUCM) web framework. An authenticated, remote attacker can exploit insufficient validation in the CUCM User Options portal to perform a cross-site scripting (XSS) attack. Affected release: 11.5(1.11007.2). Fixed in: 12.0(0.9800...

CVE-2017-3874

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170315-ucm1)

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the Cisco Unified CM User Options port...

Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

Cross site scripting

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

Code injection

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3847

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1...

Cross site scripting

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1...

CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...

CVE-2017-3833

The CVE-2017-3833 entry concerns Cisco Unified Communications Manager (CUCM) Web Interface XSS. A vulnerability exists in the web framework where insufficient input validation allows an unauthenticated, remote attacker to execute arbitrary script in the context of the user’s web interface. Affect...

CVE-2017-3847

CVE-2017-3847 affects Cisco Firepower Management Center Web Framework. An authenticated, remote attacker can exploit a vulnerability in the web interface by sending crafted URLs to execute arbitrary script code in the browser (XSS). Root cause: insufficient validation/sanitization of user input. ...

CVE-2017-3836

CVE-2017-3836 affects Cisco Unified Communications Manager (CUCM) web framework. The vulnerability allows an attacker to view sensitive data via a flaw in access protection of sensitive files exposed through URL parameters. Connected sources describe it as an information-disclosure issue in CUCM’...

CVE-2017-3833

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases:...

Cisco Firepower Management Center Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of sensitive files. An attacker could exploit this vulnerability by modifying parameters of a...

Cisco Firepower Management Center Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability occurs because the affected software fails to perform sufficient validation a...