CVEvulnerability
CVE-2014-3375
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597.
Affected configurations
• cisco unified communications manager
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/61025 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3375 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36297 tools.cisco.com
- http://www.securityfocus.com/bid/70850 www.securityfocus.com
- http://www.securitytracker.com/id/1031163 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98408 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/61025 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3375 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36297 tools.cisco.com
- http://www.securityfocus.com/bid/70850 www.securityfocus.com
- http://www.securitytracker.com/id/1031163 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98408 exchange.xforce.ibmcloud.com