CVE-2015-4272

Cisco Unified Communications Manager (CallManager) 10.5(2.10000.5) ccmivr page contains cross-site scripting (XSS) vulnerabilities due to insufficient input validation in several parameters. An unauthenticated, remote attacker could entice a user to follow a crafted link to inject arbitrary scrip...