CVE-2018-0386

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources

Severity

6.1MEDIUM

EPSS

0.2%

top 54.00%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Systems, Inc. Unified Communications Domain Manager Software Cisco Hosted Collaboration Solution

Timeline

PublishedAug 15

Latest updateMay 13

Description

A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulnerability is due to improper validation of input that is passed to the affected software. An attacker could exploit this vulnerability by persuading a user of the affected software to access a malicious URL. A successful exploit could allow the attacker to access sensitive, browser-based information o…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5cisco_systems,_inc./unified_communications_domain_manager_softwareunspecified

▶NVDcisco/hosted_collaboration_solution11.5\(1\)

🔴Vulnerability Details

GHSA

GHSA-4pww-h464-j283: A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site script↗2022-05-13

▶

CVEList

CVE-2018-0386: A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site script↗2018-08-15

▶

📋Vendor Advisories

Cisco

Cisco Unified Communications Domain Manager Reflected Cross-Site Scripting Vulnerability↗2018-08-15

▶