CVEvulnerability
CVE-2015-0714
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.
Affected configurations
• cisco finesse 10.0\(1\) base
• cisco finesse 10.5\(1\) base
• cisco finesse 10.6\(1\) base
• cisco finesse 11.0\(1\) base
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38607 Vendor Advisory
- http://www.securitytracker.com/id/1032222 www.securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38607 Vendor Advisory
- http://www.securitytracker.com/id/1032222 www.securitytracker.com