CVE-2015-4294

Cross-site scripting XSS vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766...

CVE-2015-4294

CVE-2015-4294 affects Cisco IM and Presence Service before 10.5 MR1, a reflected XSS due to incomplete filtering of HTML/script tags in crafted URLs. This could allow an unauthenticated remote attacker to execute arbitrary script in an authenticated user’s browser. Cisco's advisory notes a softwa...