CVE-2015-0714
published 2015-05-02CVE-2015-0714: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.36%
68.9th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | finesse | — | — |
| cisco | finesse | — | — |
| cisco | finesse | — | — |
| cisco | finesse | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Finesse Server Cross-Site Scripting Vulnerability
vendor_cisco·2015-05-01·CVSS 4.3
CVE-2015-0714 [MEDIUM] CWE-79 Cisco Finesse Server Cross-Site Scripting Vulnerability
Cisco Finesse Server Cross-Site Scripting Vulnerability
A vulnerability in Cisco Finesse Server could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks.
The vulnerability is due to improper input validation of certain parameters passed via HTTP GET or POST methods to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information.
Cisco has confirmed the vulnerability and released software updates.
To exploit the vulnerability, the attacker may provide a link that directs a user to a malicious s
GHSA
GHSA-qmpj-6g27-gqf7: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10
ghsa_unreviewed·2022-05-17
CVE-2015-0714 [MEDIUM] CWE-79 GHSA-qmpj-6g27-gqf7: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-05-02
Published