CVEvulnerability
CVE-2015-0594
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and CSCun18263.
Affected configurations
• cisco prime lan management solution
• cisco security manager
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594 Vendor Advisory
- http://www.securityfocus.com/bid/72793 www.securityfocus.com
- http://www.securitytracker.com/id/1031813 www.securitytracker.com
- http://www.securitytracker.com/id/1031814 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594 Vendor Advisory
- http://www.securityfocus.com/bid/72793 www.securityfocus.com
- http://www.securitytracker.com/id/1031813 www.securitytracker.com
- http://www.securitytracker.com/id/1031814 www.securitytracker.com