Lucene search

CiscoCVE-2013-3394

HistoryNov 27, 2013 - 4:43 a.m.

CVE-2013-3394

2013-11-2704:43:33

CWE-79

cisco

web.nvd.nist.gov

cisco

prime

network registrar

xss

vulnerability

web interface

security

ciscoprime

cscuh41429

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

49.1%

JSON

Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429.

Affected configurations

Nvd

Node

ciscoprime_network_registrarRange≤8.1

ciscoprime_network_registrarMatch8.0

VendorProductVersionCPE
ciscoprime_network_registrar8.0cpe:/a:cisco:prime_network_registrar:8.0:::
ciscoprime_network_registrarcpe:/a:cisco:prime_network_registrar::::

Vendor	Product	Version	CPE
cisco	prime_network_registrar	8.0	cpe:/a:cisco:prime_network_registrar:8.0:::
cisco	prime_network_registrar		cpe:/a:cisco:prime_network_registrar::::

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3394

tools.cisco.com/security/center/viewAlert.x?alertId=31921

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

49.1%

JSON

Related for CVE-2013-3394