CVE-2017-12307

CVE-2017-12307 affects Cisco Small Business 300/500 Series Managed Switches (including 300/500 Series, 350, 350X, 550X, ESW2) where the web interface’s input validation can be bypassed to trigger a reflected XSS. The root cause is insufficient input validation in parameters passed to the web serv...

CVE-2017-12358

A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient...