CVE

Id
70668  
CVE No.
CVE-2014-3372  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671766 70668 CVE-2014-3372 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=36292  View
671767 70668 CVE-2014-3372 CISCO:20141030 Cisco Unified Communications Manager Reports Interface Reflected Cross-Site Scripting Vulnerability  View
671768 70668 CVE-2014-3372 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3372  View
671769 70668 CVE-2014-3372 BID:70846  View
671770 70668 CVE-2014-3372 URL:http://www.securityfocus.com/bid/70846  View
671771 70668 CVE-2014-3372 SECTRACK:1031159  View
671772 70668 CVE-2014-3372 URL:http://www.securitytracker.com/id/1031159  View
671773 70668 CVE-2014-3372 SECUNIA:61003  View
671774 70668 CVE-2014-3372 URL:http://secunia.com/advisories/61003  View
671775 70668 CVE-2014-3372 XF:cisco-ucm-cve20143372-xss(98404)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15519 JVNDB-2014-004394 Cisco Unified Communications Domain Manager Platform Software におけるサービス運用妨害 (DoS) の脆弱性 Cisco Unified Communications Domain Manager Platform Software には、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2014-3380 70668 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004394.html  View