NetSight
IP …
medium4.3

CVE-2012-4970

Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial …

Impact

Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffected versions
PolycomHdx System Software
through 2.7.1_j
Versions 2.0.5_j, 2.5.0.7, 2.5.0.7_g, 2.6.1, 2.6.1.3

Weakness classification

CWE-79

References