CVE-2014-3363

published 2014-09-12

CVE-2014-3363: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq68443.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
cisco	unified_communications_manager	—	—

CWE-79