CVEvulnerability
CVE-2013-3440
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.
Affected configurations
• cisco unified operations manager
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/95584 osvdb.org
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30175 Vendor Advisory
- http://www.securityfocus.com/bid/61414 www.securityfocus.com
- http://www.securitytracker.com/id/1028819 www.securitytracker.com
- http://osvdb.org/95584 osvdb.org
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30175 Vendor Advisory
- http://www.securityfocus.com/bid/61414 www.securityfocus.com
- http://www.securitytracker.com/id/1028819 www.securitytracker.com