CVE-2015-0599

Cisco UCS C-Series Rack Servers’ Integrated Management Controller web interface is vulnerable to cross-frame scripting due to insufficient iframe protection. An unauthenticated, remote attacker can lure a user to a malicious page containing iframes, enabling clickjacking or other client-side atta...