CVEvulnerability
CVE-2016-1476
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024.
Affected configurations
• cisco ip phone 8800 series firmware 11.0 base
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/92404 www.securityfocus.com
- http://www.securitytracker.com/id/1036595 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/92404 www.securityfocus.com
- http://www.securitytracker.com/id/1036595 www.securitytracker.com