Cisco Unified Communications Manager Multiple Reflected XSS

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by multiple reflected cross-site scripting vulnerabilities due to insufficient input validation of certain parameters passed via HTTP GET or POST methods. %NASLMINLEVEL 70300 C Tenable...

CVE-2014-3374

CVE-2014-3374 concerns multiple reflected XSS vulnerabilities in the CCM admin interface of Cisco Unified Communications Manager Server. The issue arises from insufficient input validation of certain parameters passed via HTTP GET/POST, enabling remote attackers to inject arbitrary scripts or HTM...