NVD

Id
31574  
Name
CVE-2014-3373  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-31  
Modified Date
2015-10-08  
Seq
2014-3373  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165483 31574 CVE-2014-3373 20141030 Cisco Unified Communications Manager DNA Interface Reflected Cross-Site Scripting Vulnerability  View
165484 31574 CVE-2014-3373 http://tools.cisco.com/security/center/viewAlert.x?alertId=36294  View
165485 31574 CVE-2014-3373 70848  View
165486 31574 CVE-2014-3373 1031161  View
165487 31574 CVE-2014-3373 cisco-ucm-cve20143373-xss(98406)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16287 JVNDB-2014-005162 Cisco Unified Communications Manager のサーバの CCM Dialed Number Analyzer インターフェースにおけるクロスサイトスクリプティングの脆弱性 Cisco Unified Communications Manager のサーバの CCM Dialed Number Analyzer インターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3373 70661 CVE-2014-3373 31574 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005162.html 2014-11-03 2014-11-04 View