CVE

Id
70640  
CVE No.
CVE-2014-3344  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq31129, CSCuq31134, CSCuq31137, and CSCuq31563.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671556 70640 CVE-2014-3344 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=35431  View
671557 70640 CVE-2014-3344 CISCO:20140826 Multiple Cross-Site Scripting Vulnerabilities in Transport Gateway for Smart Call Home  View
671558 70640 CVE-2014-3344 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3344  View
671559 70640 CVE-2014-3344 BID:69412  View
671560 70640 CVE-2014-3344 URL:http://www.securityfocus.com/bid/69412  View
671561 70640 CVE-2014-3344 SECTRACK:1030760  View
671562 70640 CVE-2014-3344 URL:http://www.securitytracker.com/id/1030760  View
671563 70640 CVE-2014-3344 SECUNIA:60278  View
671564 70640 CVE-2014-3344 URL:http://secunia.com/advisories/60278  View
671565 70640 CVE-2014-3344 XF:cisco-tgsch-cve20143344-xss(95482)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15133 JVNDB-2014-004008 Cisco Intelligent Automation for Cloud における重要な情報を取得される脆弱性 Cisco Intelligent Automation for Cloud (別名 Cisco Cloud Portal) は、セッションが問題のある NULL セッションかどうかを適切に考慮しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-3352 70640 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004008.html  View