6.1
Medium
CVE-2021-1575 A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow an unauthenticated,…
Description
A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Virtualized Voice Browser | Versions not published |
Other CVEs of Cisco Virtualized Voice Browser
The 4 CVEs of Cisco Virtualized Voice Browser →
CVE-2025-20278
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local…
6.0
Medium
CVE-2025-20112
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
5.1
Medium
CVE-2024-20253
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
9.9
Critical