Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2015-4294
HistoryAug 01, 2015 - 1:59 a.m.

CVE-2015-4294

2015-08-0101:59:17
CWE-79
cisco
web.nvd.nist.gov
42
cve-2015-4294
cross-site scripting
xss
cisco
im
presence service
bug id
cscut41766
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

49.1%

JSON

Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766.

Affected configurations

Nvd
Node
ciscounified_communications_manager_im_and_presence_serviceMatch9.0\(1\)
OR
ciscounified_communications_manager_im_and_presence_serviceMatch9.1\(1\)
OR
ciscounified_communications_manager_im_and_presence_serviceMatch10.5\(1\)
VendorProductVersionCPE
ciscounified_communications_manager_im_and_presence_service9.0(1)cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:9.0\(1\):*:*:*:*:*:*:*
ciscounified_communications_manager_im_and_presence_service9.1(1)cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:9.1\(1\):*:*:*:*:*:*:*
ciscounified_communications_manager_im_and_presence_service10.5(1)cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:10.5\(1\):*:*:*:*:*:*:*

Related

cvelist 1
prion 1
cisco 1
nvd 1
cvelist
cvelist
CVE-2015-4294
2015-08-01 01:00:00
prion
prion
Cross site scripting
2015-08-01 01:59:00
cisco
cisco
Cisco IM and Presence Service Reflected Cross-Site Scripting Vulnerability
2015-07-30 20:05:22
nvd
nvd
CVE-2015-4294
2015-08-01 01:59:17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

49.1%

JSON
Related for CVE-2015-4294
cvelist1prion1cisco1nvd1