Unified Operations Manager Security Vulnerabilities and Issues — Unified Operations Manager CVE List

Lucene search

CiscoUnified Operations Manager

3 matches found

CVE•added 2011/05/20 10:55 p.m.•36 views

CVE-2011-0959

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group p...

4.3CVSS5.6AI score0.51086EPSS

CVE•added 2011/05/20 10:55 p.m.•36 views

CVE-2011-0962

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug ID CSCto12712.

4.3CVSS5.6AI score0.08448EPSS

CVE•added 2011/05/20 10:55 p.m.•35 views

CVE-2011-0960

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

7.5CVSS8.5AI score0.00321EPSS