PT-2016-4691 · Cisco · Cisco Unified Contact Center Express

Publicado 2016-01-26 · Atualizado 2016-12-07 · CVE-2016-1298

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express versions 10.0(1) through 11.0(1)

Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to permalinks.

Recommendations For versions 10.0(1) through 11.0(1), update to a version that fixes the issue, as the current versions are affected by multiple cross-site scripting vulnerabilities.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-1298

Produtos afetados

Cisco Unified Contact Center Express

Referências · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160125-ucce · Aviso do Fabricante
• http://securitytracker.com/id/1034828 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1298 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1298 · Aviso do Fabricante