Lucene search

CiscoCVE-2015-4310

HistoryAug 19, 2015 - 11:59 p.m.

CVE-2015-4310

2015-08-1923:59:01

CWE-79

cisco

web.nvd.nist.gov

cve-2015-4310

xss

cisco finesse

remote attackers

web script

html

vulnerabilities

nvd

cisco

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.

Affected configurations

Nvd

Node

ciscofinesseMatch10.5\(1\)_base

VendorProductVersionCPE
ciscofinesse10.5(1)_basecpe:2.3:a:cisco:finesse:10.5\(1\)_base:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	finesse	10.5(1)_base	cpe:2.3:a:cisco:finesse:10.5\(1\)_base:::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=40436

www.securityfocus.com/bid/76407

www.securitytracker.com/id/1033331

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.6%

JSON

Related for CVE-2015-4310