CVE-2016-1306
published 2016-02-06CVE-2016-1306: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted…
PriorityP423medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
0.77%
51.4th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | fog_director | — | — |
| sun | opensolaris | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xfc7-r9pg-4j6g: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1
ghsa_unreviewed·2022-05-17
CVE-2016-1306 [MEDIUM] CWE-79 GHSA-xfc7-r9pg-4j6g: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466.
Cisco
Cisco Fog Director Cross-Site Scripting Vulnerability
vendor_cisco·2016-02-01·CVSS 4.3
CVE-2016-1306 [MEDIUM] CWE-79 Cisco Fog Director Cross-Site Scripting Vulnerability
Cisco Fog Director Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Fog Director web framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software.
The vulnerability is due to insufficient input validation for some of the parameters that are passed to the web server. An attacker could exploit this vulnerability by persuading a user to follow a malicious link or by intercepting and injecting malicious code into a user request. A successful exploit could allow the attacker to execute arbitrary script in the context of the affected site or access sensitive browser-based information.
Cisco has not released software updates that address this vulnerability. There are no worka
Cisco
Cisco Fog Director Cross-Site Scripting Vulnerability
vendor_cisco
CVE-2016-1306 Cisco Fog Director Cross-Site Scripting Vulnerability
CVE-2016-1306: Cisco Fog Director Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Fog Director web framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation for some of the parameters that are passed to the web server. An attacker could exploit this vulnerability by persuading a user to follow a malicious link or by intercepting and injecting malicious code into a user request. A successful exploit could allow the attacker to execute arbitrary script in the context of the affected site or access sensitive browser-based information. Cisco has not released software updates that address this vulnerability. There
No detection rules found.
No writeups or analysis indexed.
2016-02-06
Published