PT-2016-6924 · Cisco · Cisco Prime Collaboration Provisioning

Publicado 2016-11-03 · Atualizado 2017-07-29 · CVE-2016-6451

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning version 10.6

Description The issue allows an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. This is due to multiple vulnerabilities in the web framework code.

Recommendations For Cisco Prime Collaboration Provisioning version 10.6, update to a version that includes the fixes for the identified issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-6451

Produtos afetados

Cisco Prime Collaboration Provisioning

Referências · 5

• http://securityfocus.com/bid/93917 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6451 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-pcp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-6451 · Aviso do Fabricante
• http://securitytracker.com/id/1037112 · Nota