CVE

Id
51206  
CVE No.
CVE-2011-3294  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.  
Phase
Assigned (20110829)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
552411 51206 CVE-2011-3294 CISCO:20111012 Cisco TelePresence Video Communication Server Cross-Site Scripting Vulnerability  View
552412 51206 CVE-2011-3294 URL:http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html  View
552413 51206 CVE-2011-3294 BID:50084  View
552414 51206 CVE-2011-3294 URL:http://www.securityfocus.com/bid/50084  View
552415 51206 CVE-2011-3294 SECTRACK:1026186  View
552416 51206 CVE-2011-3294 URL:http://securitytracker.com/id?1026186  View
552417 51206 CVE-2011-3294 XF:cisco-telepresence-useragent-xss(70563)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32512 JVNDB-2011-002752 複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性 Cisco Adaptive Security Appliances (ASA) 5500 series デバイス、および Cisco Catalyst 6500 series デバイスの ASA Services モジュールとそのソフトウェア、および Cisco Firewall Services モジュールには、サービス運用妨害 (デバイスリロード) 状態となる脆弱性が存在します。 CVE-2011-3299 51206 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002752.html  View