3 matches found
CVE-2016-1401
Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...
CVE-2016-1401
Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...
CVE-2016-1401
Cisco UCS Central Cross-Site Scripting (CVE-2016-1401) affects Cisco UCS Central Software 1.4(1a) management interface. The vulnerability arises from insufficient input validation in the HTTP web interface, enabling an unauthenticated/remote attacker to induce a user to click a crafted link and i...