CVE-2016-1298
Published on: 01/25/2016 12:00:00 AM UTC
Last Modified on: 03/23/2021 11:27:04 PM UTC
Certain versions of Unified Contact Center Express from Cisco contain the following vulnerability:
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.
- CVE-2016-1298 has been assigned by
[email protected] to track the vulnerability - currently rated as MEDIUM severity.
CVSS3 Score: 6.1 - MEDIUM
Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|
---|---|---|---|---|
NETWORK | LOW | NONE | REQUIRED | |
Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
|
CHANGED | LOW | LOW | NONE |
CVSS2 Score: 4.3 - MEDIUM
Access Vector ⓘ |
Access Complexity |
Authentication |
---|---|---|
NETWORK | MEDIUM | NONE |
Confidentiality Impact |
Integrity Impact |
Availability Impact |
NONE | PARTIAL | NONE |
CVE References
Description | Tags ⓘ | Link |
---|---|---|
Cisco Unified Contact Center Express Input Validation Flaw in Management Interface Lets Remote Conduct Cross-Site Scripting Attacks - SecurityTracker | Third Party Advisory VDB Entry www.securitytracker.com text/html |
![]() |
Cisco Unified Contact Center Express Cross-Site Scripting Vulnerability | Vendor Advisory tools.cisco.com text/html |
![]() |
There are currently no QIDs associated with this CVE
Known Affected Configurations (CPE V2.3)
Type | Vendor | Product | Version | Update | Edition | Language |
---|---|---|---|---|---|---|
Application | Cisco | Unified Contact Center Express | 10.0\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 10.5\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 10.6\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 11.0\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 10.0\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 10.5\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 10.6\(1\) | All | All | All |
Application | Cisco | Unified Contact Center Express | 11.0\(1\) | All | All | All |
- cpe:2.3:a:cisco:unified_contact_center_express:10.0\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:10.5\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:10.6\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:11.0\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:10.0\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:10.5\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:10.6\(1\):*:*:*:*:*:*:*:
- cpe:2.3:a:cisco:unified_contact_center_express:11.0\(1\):*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE