Lucene search

K
cveCiscoCVE-2015-4220
HistoryJun 25, 2015 - 4:59 p.m.

CVE-2015-4220

2015-06-2516:59:01
CWE-79
cisco
web.nvd.nist.gov
30
cve-2015-4220
cisco
xss
vulnerability
remote attackers
web script
html
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.6%

Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.

Affected configurations

Nvd
Node
ciscounified_presence_serverMatch9.1\(1\)
VendorProductVersionCPE
ciscounified_presence_server9.1(1)cpe:2.3:a:cisco:unified_presence_server:9.1\(1\):*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.6%

Related for CVE-2015-4220