CVE-2014-3373

Description

Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/98406

http://www.securitytracker.com/id/1031161

http://www.securityfocus.com/bid/70848

http://tools.cisco.com/security/center/viewAlert.x?alertId=36294

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3373

http://secunia.com/advisories/59692

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3