CVE-2014-2116

Cisco Emergency Responder (ER) 8.6 and earlier is affected by CVE-2014-2116 due to insufficient input validation in the web interface. An unauthenticated, remote attacker could inject web pages and modify dynamic content by exploiting parameters in the web UI (Web page injection). This is documen...