CVE-2011-3294

Cisco TelePresence Video Communication Server (VCS) before X7.0 has a cross-site scripting (XSS) flaw in the login page’s administrative interface. The vulnerability allows an attacker to inject arbitrary web script or HTML via the User-Agent header. Root cause details are not fully elaborated in...