CVEvulnerability
CVE-2014-2104
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and CSCum63113.
Affected configurations
• cisco unified communications domain manager 9.0\(.1\)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2104 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33111 Vendor Advisory
- http://www.securityfocus.com/bid/65869 www.securityfocus.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2104 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=33111 Vendor Advisory
- http://www.securityfocus.com/bid/65869 www.securityfocus.com