CVE-2015-6390

published 2015-12-03

CVE-2015-6390: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	unity_connection	—	—
cisco	unity_connection	—	—

CWE-79