CVE-2016-1377

published 2016-04-12

CVE-2016-1377: Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
cisco	unity_connection	—	—
cisco	unity_connection	—	—
cisco	unity_connection	—	—
cisco	unity_connection	—	—
cisco	unity_connection	—	—
cisco	unity_connection	—	—
cisco	unity_connection	—	—

CWE-79