CVE-2018-0223

Cisco Security Manager is affected by CVE-2018-0223 due to a reflected cross-site scripting (XSS) flaw in the DesktopServlet of the web-based management interface. The issue arises from insufficient validation of input, enabling an unauthenticated, remote attacker to entice a user to click a craf...

CVE-2018-0223: Improper Neutralization of Input During Web Page Generation

A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation o...