Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability
|
Información sobre el sistema
|
| |
|
|
Software afectado |
Cisco |
Descripción
|
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an authenticated user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading an authenticated user to click a crafted link. A
More info:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-imps-xss-quWkd9yF?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Unified%20Communications%20Manager%20IM%20&%20Presence%20Service%20Cross-Site%20Scripting%20Vulnerability&vs_k=1 |
Identificadores estándar
|
|
Propiedad |
Valor |
|
CVE |
CVE-2024-20310. |
