CVE-2015-4310
published 2015-08-19CVE-2015-4310: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.16%
80.1th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | finesse | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Cisco Finesse Cross-Site Scripting Vulnerabilities
vendor_cisco·2015-08-18·CVSS 4.3
CVE-2015-4310 [MEDIUM] CWE-352 Multiple Cisco Finesse Cross-Site Scripting Vulnerabilities
Multiple Cisco Finesse Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in Cisco Finesse could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks.
The vulnerabilities are due to improper input validation of certain parameters passed via HTTP GET or POST methods to an affected device. An unauthenticated, remote attacker could exploit these vulnerabilities by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the affected site or allow the attacker to access sensitive browser-based information.
Cisco has confirmed the vulnerabilities and has released updated software.
To exploit the vulnerabilities, the attacker may provide a link that directs a user to
GHSA
GHSA-5h59-mr8x-4c4q: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10
ghsa_unreviewed·2022-05-17
CVE-2015-4310 [MEDIUM] CWE-79 GHSA-5h59-mr8x-4c4q: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-08-19
Published