CVE-2015-4298

Cisco Unified Web and E-Mail Interaction Manager 9.02 and 11.01 improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056...

CVE-2015-4298

CVE-2015-4298 affects Cisco Unified Web and E-Mail Interaction Manager (versions 9.0(2) and 11.0(1)). The root cause is improper authorization handling that allows remote authenticated users to read or write stored data via unspecified vectors. The vulnerability results from insufficient validati...

CVE-2015-6255

CVE-2015-6255 affects Cisco Unified Web and E‑Mail Interaction Manager 9.0(2). The vulnerability resides in the web chat interface where insufficient input validation allows a remote attacker to deliver a crafted chat message that injects arbitrary web script or HTML (XSS). The root cause is inpu...

CVE-2015-4299: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046...

CVE-2015-4298: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 and 11.01 improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056...

PT-2015-6510

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description The issue is related to improper authorization, allowing remote authenticated users to remove default messaging-queue system folders. Recommendations For Cisco Unified W...

PT-2015-7141

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted chat message. Recommendations For Cisco Unified Web and...

CVE-2015-6255: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051...

PT-2015-6509

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager versions 9.02 and 11.01 Description The issue is related to improper authorization, allowing remote authenticated users to read or write to stored data. Recommendations For version 9.02, update ...

CVE-2015-0655

Cross-site scripting XSS vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184...

CVE-2015-0655: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184...

PT-2015-4782

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via vectors related to a POST request...

CVE-2014-2194

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

CVE-2014-2192

CVE-2014-2192 affects Cisco Unified Web and E-mail Interaction Manager 9.0(2). The issue is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in a parameter, allowing an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted link. The Ci...

CVE-2014-2192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033...

CVE-2014-2193: Improper Input Validation

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

PT-2014-4548

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-mail Interaction Manager version 9.02 Description The issue allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity into the system/egain/chat/entrypoint. Recommendations For Cis...

PT-2014-4547

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager affected versions not specified Description The issue allows remote attackers to inject conversation text by obtaining a valid session identifier, which is placed in GET requests. Recommendation...

CVE-2014-2194: Improper Input Validation

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

PT-2014-4546

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For Cisco Unified Web and...