Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...

CVE-2014-3372

CVE-2014-3372 affects Cisco Unified Communications Manager (CUCM) Server, specifically the CCM reports interface. The vulnerability is due to insufficient input validation of parameters passed via HTTP GET/POST, enabling multiple reflected XSS attacks. Impact is remote, unauthenticated exploitati...