CVEvulnerability
CVE-2014-3408
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763.
Affected configurations
• cisco prime optical 10.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3408 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36099 Vendor Advisory
- http://www.securityfocus.com/bid/70594 www.securityfocus.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3408 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36099 Vendor Advisory
- http://www.securityfocus.com/bid/70594 www.securityfocus.com