CVE-2016-1298

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

CVE-2016-1298

CVE-2016-1298 affects Cisco Unified Contact Center Express (UCCE) up to 11.0(1). The issue is a lack of input validation in the HTTP web-based management interface that handles permalinks, enabling remote attackers to perform cross-site scripting (XSS) by crafting a malicious permalink. This requ...