CVE-2015-4299: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046...

CVE-2015-4298: Improper Access Control

Cisco Unified Web and E-Mail Interaction Manager 9.02 and 11.01 improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056...

PT-2015-6510

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description The issue is related to improper authorization, allowing remote authenticated users to remove default messaging-queue system folders. Recommendations For Cisco Unified W...

PT-2015-7141

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted chat message. Recommendations For Cisco Unified Web and...

CVE-2015-6255: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051...

PT-2015-6509

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager versions 9.02 and 11.01 Description The issue is related to improper authorization, allowing remote authenticated users to read or write to stored data. Recommendations For version 9.02, update ...

PT-2015-4782

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via vectors related to a POST request...

CVE-2015-0655: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184...

CVE-2014-2194

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

CVE-2014-2192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033...

CVE-2014-2193: Improper Input Validation

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084...

PT-2014-4548

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-mail Interaction Manager version 9.02 Description The issue allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity into the system/egain/chat/entrypoint. Recommendations For Cis...

PT-2014-4547

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-Mail Interaction Manager affected versions not specified Description The issue allows remote attackers to inject conversation text by obtaining a valid session identifier, which is placed in GET requests. Recommendation...

CVE-2014-2194: Improper Input Validation

system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity...

PT-2014-4546

Name of the Vulnerable Software and Affected Versions Cisco Unified Web and E-mail Interaction Manager version 9.02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For Cisco Unified Web and...