medium4.3
CVE-2014-0723
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to …
Impact
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Communications Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/103222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0723
- http://www.securityfocus.com/bid/65495
- http://www.securitytracker.com/id/1029756
- http://osvdb.org/103222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0723
- http://www.securityfocus.com/bid/65495
- http://www.securitytracker.com/id/1029756