CVE-2013-1132

2013-07-1021:00:00

cisco

www.cve.org

cisco

unified communications

cross-site scripting

xss

remote attackers

web script

html

bug ids

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Communications Domain Manager allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) IptAccountMgmt, (2) IptFeatureConfigTemplateMgmt, (3) IptFeatureDisplayPolicyMgmt, or (4) IptProviderMgmt page, aka Bug IDs CSCud69972, CSCud70193, and CSCud70261.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1132