CVE

Id
70669  
CVE No.
CVE-2014-3373  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671776 70669 CVE-2014-3373 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=36294  View
671777 70669 CVE-2014-3373 CISCO:20141030 Cisco Unified Communications Manager DNA Interface Reflected Cross-Site Scripting Vulnerability  View
671778 70669 CVE-2014-3373 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3373  View
671779 70669 CVE-2014-3373 BID:70848  View
671780 70669 CVE-2014-3373 URL:http://www.securityfocus.com/bid/70848  View
671781 70669 CVE-2014-3373 SECTRACK:1031161  View
671782 70669 CVE-2014-3373 URL:http://www.securitytracker.com/id/1031161  View
671783 70669 CVE-2014-3373 SECUNIA:59692  View
671784 70669 CVE-2014-3373 URL:http://secunia.com/advisories/59692  View
671785 70669 CVE-2014-3373 XF:cisco-ucm-cve20143373-xss(98406)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16108 JVNDB-2014-004983 Cisco Email Security Appliance 上で稼働する Cisco AsyncOS の ZIP インスペクションエンジンにおけるマルウェアフィルタリングを回避される脆弱性 Cisco Email Security Appliance (ESA) 上で稼働する Cisco AsyncOS の ZIP インスペクションエンジンは、ZIP アーカイブを適切に分析しないため、マルウェアフィルタリングを回避される脆弱性が存在します。 CVE-2014-3381 70669 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004983.html  View