Non notée
CVE-2017-3798 A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified…
Description
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.5(1.12029.1) 11.5(1.12900.11) 12.0(0.98000.369) 12.0(0.98000.370) 12.0(0.98000.398) 12.0(0.98000.457).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Communications Manager | Versions non publiées |
Références
- 1037653 www.securitytracker.com
- tools.cisco.com tools.cisco.com
- 95872 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Communications Manager
Les 28 CVE de Cisco Unified Communications Manager →
CVE-2018-0267
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local…
Non notée
CVE-2018-0266
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote…
Non notée
CVE-2018-0198
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote…
Non notée
CVE-2018-0206
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an…
Non notée