CVE-2016-6429

CVE-2016-6429 affects Cisco IP Interoperability and Collaboration System (IPICS). The issue is a cross-site scripting (XSS) vulnerability in the web framework, arising from insufficient input validation of parameters passed to the web server. An unauthenticated, remote attacker could exploit this...

CVE-2016-6430

CVE-2016-6430 affects Cisco IP Interoperability and Collaboration System (IPICS) CLI. The vulnerability arises from insufficient input validation in the command-line interface, allowing an authenticated, local attacker to elevate session privileges. Known affected release: IPICS 4.10(1); fixed in...

CVE-2016-1375

Cisco IP Interoperability and Collaboration System (IOS) 4.10(1) contains an XSS flaw in the web framework code that allows remote attackers to inject arbitrary script or HTML via a crafted URL. The vulnerability stems from insufficient XSS protections and can be exploited by convincing a user to...

CVE-2016-6397

Cisco IPICS Universal Media Services (UMS) vulnerable via its interdevice communications interface. Affects Cisco IPICS releases 4.8(1)–4.10(1). The issue allows an unauthenticated, remote attacker to modify UMS configuration parameters and render the system unavailable. Root cause described as i...