CVE-2016-6404 — Cross-site Scripting in Cisco IOS

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.5%
top 36.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS
Timeline
PublishedSep 18
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDcisco/ios15.5\(2\)t

🔴Vulnerability Details

2
GHSA
GHSA-5qv6-9jr7-4rjv: Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15↗2022-05-17
▶
CVEList
CVE-2016-6404: Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15↗2016-09-18
▶

📋Vendor Advisories

1
Cisco
Cisco IOS and IOS XE Software IOx Local Manager Cross-Site Scripting Vulnerability↗2016-09-14
▶
CVE-2016-6404 — Cross-site Scripting in Cisco IOS | cvebase