CVE-2013-3416
Summary
| CVE | CVE-2013-3416 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-07-10 21:55:00 UTC |
| Updated | 2013-08-20 03:23:00 UTC |
| Description | Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuh47574 and CSCuh95997. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Unified Operations Manager | - | All | All | All |
| Application | Cisco | Unified Operations Manager | - | All | All | All |
| Application | Cisco | Unified Service Monitor | - | All | All | All |
| Application | Cisco | Unified Service Monitor | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Unified Operations Manager Input Validation Flaw Permits Cross-Site Scripting Attacks - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Cisco Security Notice: Cisco Unified Communications Management Products Cross-Site Scripting Vulnerability | CISCO | tools.cisco.com | |
| Cisco Unified Service Monitor Input Validation Flaw Permits Cross-Site Scripting Attacks - SecurityTracker | SECTRACK | www.securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.