CVEvulnerability
CVE-2014-3363
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq68443.
Affected configurations
• cisco unified communications manager 9.1\(2.10000.28\)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/59105 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3363 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35672 Vendor Advisory
- http://www.securityfocus.com/bid/69739 www.securityfocus.com
- http://www.securitytracker.com/id/1030836 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95882 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/59105 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3363 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35672 Vendor Advisory
- http://www.securityfocus.com/bid/69739 www.securityfocus.com
- http://www.securitytracker.com/id/1030836 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95882 exchange.xforce.ibmcloud.com