Cisco Enterprise Chat and Email CVE-2019-1702 Multiple Cross Site Scripting Vulnerabilities
BID:107314
CVE-2019-1702 |Info
Cisco Enterprise Chat and Email CVE-2019-1702 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 107314 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1702 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 06 2019 12:00AM |
| Updated: | Mar 06 2019 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Cisco Enterprise Chat and Email 11.6(1) |
| Not Vulnerable: | |
Discussion
Cisco Enterprise Chat and Email CVE-2019-1702 Multiple Cross Site Scripting Vulnerabilities
Cisco Enterprise Chat and Email is prone to multiple cross-site scripting vulnerabilities.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
These issues are being tracked by Cisco Bug IDs CSCvn77926, and CSCvn77927.
Cisco Enterprise Chat and Email is prone to multiple cross-site scripting vulnerabilities.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
These issues are being tracked by Cisco Bug IDs CSCvn77926, and CSCvn77927.
Exploit / POC
Cisco Enterprise Chat and Email CVE-2019-1702 Multiple Cross Site Scripting Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].