CVE-2016-6359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

PT-2016-6843

Name of the Vulnerable Software and Affected Versions Cisco Transport Gateway Installation Software version 4.14.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted value. This could potentially lead to unauthorized access or...

CVE-2014-3344

CVE-2014-3344 affects Cisco Transport Gateway for Smart Call Home (TG-SCH) 4.0. Multiple cross-site scripting (XSS) flaws exist in the web framework, allowing remote attackers to inject arbitrary web scripts or HTML via unspecified parameters. Root cause cited: insufficient input validation in th...