CVE

Id
70671  
CVE No.
CVE-2014-3375  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671796 70671 CVE-2014-3375 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=36297  View
671797 70671 CVE-2014-3375 CISCO:20141030 Cisco Unified Communications Manager Service Interface Reflected Cross-Site Scripting Vulnerability  View
671798 70671 CVE-2014-3375 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3375  View
671799 70671 CVE-2014-3375 BID:70850  View
671800 70671 CVE-2014-3375 URL:http://www.securityfocus.com/bid/70850  View
671801 70671 CVE-2014-3375 SECTRACK:1031163  View
671802 70671 CVE-2014-3375 URL:http://www.securitytracker.com/id/1031163  View
671803 70671 CVE-2014-3375 SECUNIA:61025  View
671804 70671 CVE-2014-3375 URL:http://secunia.com/advisories/61025  View
671805 70671 CVE-2014-3375 XF:cisco-ucm-cve20143375-xss(98408)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15782 JVNDB-2014-004657 Cisco ASA ソフトウェアの VPN コンポーネントの IKE の実装におけるサービス運用妨害 (DoS) の脆弱性 Cisco ASA ソフトウェアの VPN コンポーネントの IKE の実装には、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。 CVE-2014-3383 70671 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004657.html  View