CVE-2018-15451

CVE-2018-15451 is a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Prime Service Catalog. The issue stems from insufficient validation of user-supplied input processed by the interface, allowing an authenticated, remote attacker to lure a user into clickin...