CVE-2014-3363

2014-09-1201:00:00

cisco

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq68443.

References

secunia.com/advisories/59105

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3363

tools.cisco.com/security/center/viewAlert.x?alertId=35672

www.securityfocus.com/bid/69739

www.securitytracker.com/id/1030836

exchange.xforce.ibmcloud.com/vulnerabilities/95882